WO2018086566A1

WO2018086566A1 - Pvr protection method and system

Info

Publication number: WO2018086566A1
Application number: PCT/CN2017/110334
Authority: WO
Inventors: 钟争胜
Original assignee: 深圳创维数字技术有限公司
Priority date: 2016-11-10
Filing date: 2017-11-10
Publication date: 2018-05-17
Also published as: CN106533668A; CN106533668B

Abstract

A PVR protection method and system. The method comprises: when a recording instruction of a first set-top box is triggered, the first set-top box sends request information for obtaining a first recording key to a PVR management system (PMS), wherein the request information comprises first identification information of the first set-top box; the PMS receives the request information and generates a random key, encrypts the random key according to a first private key corresponding to the first identification information to obtain the first recording key, and sends the first recording key to the first set-top box; the first set-top box receives and decrypts the first recording key to obtain the random key, and encrypts descrambled audio data with the random key to obtain an encrypted program; and the first set-top box stores the encrypted program to an external storage device to achieve PVR encrypted recording.

Description

PVR protection method and system

Technical field

The present disclosure relates to the field of set top box technologies, for example, to a PVR protection method and system.

Background technique

Digital set-top boxes have spread throughout the family, becoming an important platform for people to understand the world, cognitive things and entertainment consumption in their daily lives. With the continuous development and updating of digital set-top box technology and business, Personal Video Recorder (PVR) technology has been successfully applied to set-top boxes, using PVR's core technology - digital processing and storage technology, flexible programming Recording and playback make the digital programs provided by the set-top box exciting, allowing users to interact with the set-top box as they wish.

In order to protect the copyright of the program, the PVR program stored on the set-top box hard disk usually needs to be encrypted, and the encrypted PVR program can only be used by the same set-top box, and the program data cannot be shared.

Summary of the invention

The present disclosure provides a PVR protection method and system, which can solve the problem that data recorded by the related encryption method can only be played back on a set top box that records the data, so that the recorded data cannot be shared by other set tops.

The present disclosure provides a PVR protection method, which may include: when a recording instruction of a first set top box is triggered, the first set top box sends a request for acquiring a first recording key to a power production management system (PMS) of a PVR. Information, wherein the request information includes first identification information of the first set top box; the PMS receives the request information and generates a random key, according to the first private key pair corresponding to the first identification information Encrypting the random key to obtain the first recording key, and transmitting the first recording key to the first set top box; the first set top box receives and decrypts the first recording key to obtain The random key, and using the random key to encrypt the descrambled audio and video data to obtain an encrypted program; and the first set top box saves the encrypted program to an external storage device to implement PVR encrypted recording.

Optionally, the method further includes: a PVR playback process, the PVR playback process includes: when the second set top box receives the playback instruction, reading the encrypted program, the first identification information from the external storage device And comparing, by the first recording key, the second identification information of the second set top box with the first identification information; when the second identification information is different from the first identification information, The second set top box sends the second identification information, the first identification information, and the first recording key to the PMS; the PMS is based on the second private key corresponding to the second identification information. The first private key corresponding to the first identification information and the first recording key generate a second recording key; the second set top box decrypts the second recording key to obtain the random key Key, and decrypting the encrypted program by using the random key, obtaining a decrypted program, and playing the decrypted program.

The present disclosure further provides a personal video recording PVR protection system, which may include: a set top box and a management system PMS of the PVR; the set top box includes: a first sending module, a first decrypting module, and a saving module; the first sending module, setting The request information for acquiring the first recording key is sent to the management system PMS of the PVR, where the request information includes the first identification information of the set top box; the first decryption module is set to Decrypting the first recording key to obtain a random key, and encrypting the descrambled audio and video data by using the random key to obtain a decrypted program; the saving module is configured to save the encrypted program to an external The storage device is configured to implement PVR encrypted recording; the management system PMS is configured to receive the request information and generate a random key, and perform the random key according to the first private key corresponding to the first identification information. Encrypt to get the first recording key.

Optionally, the set top box further includes: a comparison module, a second sending module, and a second decrypting module; the comparing module is configured to read the encrypted program from the external storage device when a playback instruction is triggered, The first identification information and the first recording key compare the second identification information of the second identification information with the first identification information, and the second sending module is configured to: when the second identification information and the first identification information When the identification information is different, the second identification information, the first identification information, and the first recording key corresponding to the recorded program are sent to the PMS; and the second decryption module is configured to decrypt the second recording key. Obtaining the random key, and decrypting the encrypted program by using the random key to obtain a decrypted program; the PMS is further configured to be according to the second identifier information, the first identifier information, and the first The recording key generates a second recording key.

Optionally, the set top box further includes: a third decryption module, configured to decrypt the first recording key to obtain the random key when the second identifier information is the same as the first identifier information, And decrypting the encrypted program by using the random key to obtain a decrypted program.

The present disclosure also provides a PVR protection method, which can be applied to a PVR management system PMS, including:

Receiving, by the first set top box, request information for acquiring a first recording key, where the request letter The information includes the first identification information of the first set top box; determining, according to the first identification information, whether the first set top box has recording permission; when the first set top box has recording permission, generating a random key, and according to Determining, by the first identification information and the random key, the first recording key; sending the first recording key to the first set top box, so that the first set top box is facing the first Decrypting the recording key to obtain the random key, and encrypting the data stream to be encrypted by using the random key to obtain an encrypted data stream, so that the second set top box acquires the encrypted data stream, the first identifier information, and the Describe the first recording key;

Receiving, by the second set top box, the first identification information, the first recording key, and the second identification information of the second set top box, where the second set top box and the first set top box are different set top boxes; Determining, by the second identifier information, whether the second set top box has a play permission; and when the second set top box has a play right, decrypting the first record key according to the first identifier information, to obtain the random secret Key; obtaining a second recording key according to the second identification information and the random key; and transmitting the second recording key to the second set top box, so that the second set top box decrypts the The second recording key obtains the random key, and decrypts the encrypted data stream by using the random key to obtain a decrypted data stream.

The present disclosure also provides a PVR protection method, which can be applied to a first set top box, including:

Sending the request information of the first recording key to the management system PMS of the PVR, where the request information includes the first identification information of the first set top box, so that the PMS determines the according to the first identification information. Whether the first set top box has the recording permission, and when the first set top box has the recording permission, generates a random key, and obtains and sends the first set top box according to the first identification information and the random key. Describe the first recording key;

Receiving the first recording key sent by the management system PMS of the PVR; decrypting the first recording key to obtain the random key, and encrypting the data stream to be encrypted by using the random key to obtain encryption data flow.

The present disclosure also provides a PVR protection method, which can be applied to a second set top box, including:

Acquiring the encrypted data stream after the first set top box is encrypted, the first identification information of the first set top box, and the first recording key, wherein the management system PMS whose first recording key is a PVR is recorded in the first set top box When the permission is obtained, according to the generated random key and the first identification information;

Sending, by the PMS, the first identification information, the first recording key, and the second identification information of the second set top box, so that the PMS determines the second set top box according to the second identification information. Whether there is a play permission, and when the second set top box has a play permission, according to the first identification information Decrypting the first recording key to obtain the random key, and obtaining a second recording key according to the second identification information and the random key, and transmitting the second recording key to the second set top box a second recording key; receiving the second recording key sent by the management system PMS of the PVR; decrypting the second recording key to obtain the random key, and using the random key to encrypt the The data stream is decrypted to obtain a decrypted data stream.

The present disclosure further provides a PVR management system PMS, which may include: a receiving module, configured to: receive request information for acquiring a first recording key sent by a first set top box, where the request information includes the first set top box The first identifier information is configured to: determine, according to the first identifier information, whether the first set top box has a recording authority; and the key processing module is configured to: when the first set top box has a recording permission, Generating a random key, and obtaining the first recording key according to the first identification information and the random key; and the key sending module is configured to: send the first recording key to the first a set top box, so that the first set top box decrypts the first recording key to obtain the random key, and encrypts the data stream to be encrypted by using the random key to obtain an encrypted data stream, thereby enabling the second set top box Obtaining the encrypted data stream, the first identification information, and the first recording key;

The receiving module is further configured to: receive the first identification information, the first recording key, and the second identification information of the second set top box sent by the second set top box, where the second set top box and the first set top box The privilege judging module is further configured to: determine, according to the second identifier information, whether the second set top box has a play permission; the key processing module is further configured to: when the second set top box has Decrypting the first recording key according to the first identification information to obtain the random key; and obtaining a second recording key according to the second identification information and the random key; The key sending module is further configured to: send the second recording key to the second set top box, so that the second set top box decrypts the second recording key to obtain the random key, and Decrypting the encrypted data stream with the random key results in a decrypted data stream.

The present disclosure also provides a computer readable storage medium storing computer executable instructions for performing any of the methods described above.

The present disclosure also provides a PVR management device including one or more processors, a memory, and one or more programs, the one or more programs being stored in a memory when being processed by one or more processors When executed, the corresponding method described above can be performed.

The present disclosure also provides a set top box including one or more processors, a memory, and one or more programs, the one or more programs being stored in the memory when processed by one or more When the device is executed, the corresponding method described above can be performed.

The present disclosure also provides a computer program product comprising a computer program stored on a non-transitory computer readable storage medium, the computer program comprising program instructions, when the program instructions are executed by a computer, Having the computer perform any of the methods described above.

The PVR protection method and system provided by the present disclosure generates a random key for recording a program through a PMS, and acquires the random key through the PMS during playback, and decrypts the program by using the random key. The sharing of the recorded programs is achieved such that the recorded programs can also be played back from other set top boxes of the set top box that recorded the program.

DRAWINGS

FIG. 1 is a flowchart of a PVR protection method according to an embodiment.

2 is a flow chart of another PVR protection method provided by an embodiment.

FIG. 3 is a flowchart of still another PVR protection method according to an embodiment.

FIG. 4 is a flowchart of still another PVR protection method according to an embodiment.

FIG. 5 is a schematic structural diagram of a PVR protection system according to an embodiment.

FIG. 6 is a schematic structural diagram of a set top box in a PVR protection system according to an embodiment.

FIG. 7 is a flowchart of still another PVR protection method according to an embodiment.

FIG. 8 is a flowchart of still another PVR protection method according to an embodiment.

FIG. 9 is a flowchart of still another PVR protection method according to an embodiment.

FIG. 10 is a schematic structural diagram of a PVR management system PMS according to an embodiment.

FIG. 11 is a schematic structural diagram of hardware of a PVR management device according to an embodiment.

FIG. 12 is a schematic structural diagram of hardware of a set top box according to an embodiment.

detailed description

In the present embodiment, the suffixes such as "module", "component" or "unit" used to denote elements are merely illustrative of the present invention, and do not have a specific meaning per se. Therefore, "module", "component" or "unit" can be used in combination.

The terminal device can be implemented in various forms. For example, the terminal described in the present invention may include, for example, a mobile phone, a smart phone, a notebook computer, a digital broadcast receiver, a PDA (Personal Digital Assistant), a PAD (Tablet), a PMP (Portable Multimedia Player), a navigation device, etc. Mobile terminals and fixed terminals such as digital TVs, desktop computers, and the like. However, those skilled in the art will appreciate that configurations in accordance with embodiments of the present invention can be applied to fixed type terminals in addition to components that are specifically for mobile purposes.

This embodiment provides a PVR protection method, where the method includes a recording process. As shown in FIG. 1, the recording process may include steps 110-140.

In step 110, when the recording instruction of the first set top box is triggered, the first set top box sends request information for acquiring the first recording key to the management system PMS of the PVR, wherein the request information includes the first set top box. First identification information.

In step 120, the PMS receives the request information and generates a random key, and encrypts the random key according to the first private key corresponding to the first identification information to obtain a first recording key, and Sending the first recording key to the first set top box.

Optionally, the first set top box establishes an association relationship between the first identification information and the first recording key, and stores the association relationship in the external storage device.

For example, the first set top box can bind its own identification information to the first recording key of the recorded program, and store the binding relationship on the external storage device, so that the other set top box can obtain the identifier of the first set top box from the external storage device. Information and first recording key.

In step 130, the first set top box receives and decrypts the first recording key to obtain the random key, and encrypts the descrambled audio and video data by using the random key to obtain an encrypted program.

In step 140, the first set top box saves the encrypted program to an external storage device to implement PVR encrypted recording.

Manufacturers of Conditional Access (CA) services provided in the market generally use chip-level hardware encryption methods. For example, during the recording process, the private key in the main chip is used, and the random key can be obtained through the operation. The audio and video data is encrypted by using the random key, and the random key is obtained by using the private key in the main chip during video playback, and the audio and video data is decrypted by using the random key. However, the encryption method is to protect the audio and video data based on the private link of the hardware, and the other set top boxes cannot recover the random key of the encrypted set top box, so that the recording and playback are restricted to be used on the same set top box, and the encrypted video data is used. Cannot be shared by set-top boxes approved by other CA vendors.

In this embodiment, the set top box sends its own first identification information to the PMS system, and the PMS system generates a random key for the first identification information, and uses an encryption algorithm corresponding to the first identification information. The first private key encrypts the random key to generate a first recording key, the set top box decrypts the first recording key to obtain the random key, and uses the random key to record a program, By encrypting the random key, the security of the key transmission can be improved, so that the key is not easily intercepted in the network transmission, thereby ensuring the security of the encrypted program, so that the PMS system is adopted. The recording key is managed to solve the problem that the PVR program obtained by the existing recording method can only be played back on the same set top box and cannot be played back on other set top boxes.

In the step 110, the recording instruction of the first set top box is triggered, which may be a control command generated by the user through a control panel of the set top box or a control device such as a remote controller to perform a control operation on the set top box. The control command is Record the command. The CA front end may be set in the PMS management system PMS, and the PMS may obtain related information of the set top box that is authenticated by the CA front end, such as identification information of the set top box, a private key, an encryption method, and a recording authority. In this embodiment, the identification information of the set top box may be a chip number CHIP ID. The PMS system may pre-establish a database for storing the chip number CHIP ID of the set top box, a private key, an encryption method, and recording rights. Moreover, the chip number CHIP ID, private key, encryption method, and recording authority are stored in association with each other. That is to say, the PMS system can determine its corresponding private key, encryption method, recording authority, and the like according to the CHIP ID of the set top box.

The sending, by the first set top box, the request information for acquiring the first recording key to the PVR management system PMS may include the first set top box sending the request information carrying the own CHIP ID to the PMS system over the Internet, so that the PMS passes the request. The information generates a first recording key for recording the program.

In the step 120, the random key is randomly generated by the PMS system, and the random key may be a character string, such as ab12. After generating the random key, encrypting the random key according to the first private key corresponding to the first identification information to obtain a first recording key. Since not all set top boxes have the right to record programs, there is no need to generate a random key for the set top box and perform subsequent steps when the set top box does not have recording rights. Therefore, before the step 120, the method may further include: a process of querying whether the first set top box has a recording permission, the method may include: the PMS receiving the request information, and acquiring first identification information carried by the request information; The PMS queries, in the database, whether the set top box corresponding to the first identifier information has a recording authority; if the first set top box has a recording right, the step 120 is performed;

If the first set top box does not have recording permission, the PMS may feed back the query result to the first set top box through the network, that is, the first set top box does not have recording permission.

In this embodiment, the PMS receives the request information and generates a random key, and then encrypts the random key according to the first private key corresponding to the first identification information to obtain a first recording key. Steps 1210 - 1240 can be included.

In step 1210, the PMS receives and parses the request information to obtain the first identification information.

In step 1220, the PMS searches for a corresponding first private key and an encryption method in the database according to the first identification information.

In step 1230, the PMS randomly generates a random key, and encrypts the random key using the first private key and an encryption method to obtain a first recording key.

In step 1240, the PMS feeds back the first recording key to the first set top box.

In this embodiment, the first identification information may be CHIP ID1, and the first private key is a private key in the main chip of the set top box. That is, the PMS uses the private key in the set-top box main chip, such as a session key (Session Key, SK) to encrypt the random key to obtain the first recording key, when the first set-top box receives the first recording key. The first recording key may be decrypted according to a private key carried in the master chip thereof to obtain the random key. In this embodiment, the process of generating a random key and encrypting the random key by using the first private key is completed in the PMS system, and the PMS system may also save the random key, when the top set box plays back the recorded content of the first set top box. During the program, the set top box can acquire the random key through the PMS system, and use the random key to decrypt the program recorded by the first set top box, thereby realizing sharing of the PVR program.

In the step 130, the first set top box decrypts the first recording key to obtain the random key, and the first set top box receives the first recording key fed back by the PMS, and the A recording key is set to the encryption engine, and the first recording key is decrypted using the first private key to obtain the random key. At the same time, the first identification information and the metadata (META DATA) information such as the first recording key are saved to an external storage device (for example, a USB flash drive or a mobile hard disk, etc.), and the external storage device stores the first set top box. An external storage device for recorded programs. That is, when the top set box acquires the program recorded by the first set top box from the external storage device, the META DATA information of the first set top box may also be acquired, so that the random key may be acquired according to the META DATA information.

In the step 140, the first set top box writes the obtained recorded program to an external storage device to form a PVR file corresponding to the program played by the first set top box, and repeats the above encrypted recording process until the recording is not completed. End. The end of the recording may be the end of the program time (the digital television terminal judges the start time and duration of the learned program through the Electronic Program Guide (EPG) information of the digital television channel), and completes the recording of the program; The user cancels the recording; it can also be the end of the error, such as the storage device is full.

This embodiment further provides a PVR protection method, where the method includes a recording process. As shown in FIG. 2, the recording process may include steps 210-290.

In step 210, the set-top box STB1 recording command is triggered, and a recording request is sent to the PMS, The request includes the CHIP ID1 information of the STB1, wherein the set top box STB1 transmits the recording request to the PVR management system PMS via the Internet.

In step 220, the PMS searches through the database to query the recording permission of the set-top box STB1. If the set-top box STB1 is allowed to record, step 230 is performed. If the set-top box STB1 is not allowed to record, the PMS returns the unrecordable permission to the set-top box STB1 through the network. And perform step 250.

In step 230, the PMS generates a random key PVR KEY, and encrypts the PVR KEY by using the private key SK1 corresponding to the CHIP ID1 to obtain a recording key RECORD KEY1.

In step 240, the PMS returns recording rights and RECORD KEY1 to the set top box STB1 over the network.

In step 250, the set top box STB1 checks the result of the PMS return, if the recording is allowed, then step 260 is performed; if the recording is not allowed, step 290 is performed.

In step 260, the set top box STB1 sets the RECORD KEY1 returned by the PMS to the encryption engine, decrypts the PVR KEY by the private key SK1, and saves the metadata METADATA information composed of CHIP ID1 and RECORD KEY1 to the external storage device.

In step 270, the set top box STB1 encrypts the descrambled audio and video data using the PVR KEY, obtains the encrypted data RECORD CONTENT, and saves the RECORD CONTENT to the external storage device. In step 280, step 270 is repeated until the user cancels the recording or other error occurs, then the recording ends. In step 290, the recording is ended.

The recording process provided by the present embodiment is based on the recording process of the main chip of the set top box and the PMS system, and the PMS saves the encryption algorithm of the main chip and the private key SK. When the set-top box requests the PVR operation from the PMS, the PMS finds the corresponding private key according to the first set-top box transmission chip number CHIP ID1, thereby generating and returning the encrypted PVR KEY corresponding to the CHIP ID1, and then the set-top box can utilize the chip. The private key SK inside decrypts the PVR KEY, thereby completing the recording action. In this way, the PVR KEY is simultaneously saved in the first set top box and the PMS, and the set top box that plays back the program recorded by the first set top box can save the PVR KEY, or can obtain the PVR KEY through the PMS, and ensure the security of the recorded program. The sharing of recorded programs is achieved on the basis of sex.

The embodiment further provides a PVR protection method, and the method further includes a playback process. As shown in FIG. 3, the playback process may include steps 310-340.

In step 310, when the second set top box receives the playback instruction, the encrypted program, the first identification information, and the first recording key are read from the external storage device, and the second set top box is second. The identification information is compared with the first identification information.

For example, the receiving, by the second set top box, the playback instruction refers to the second set top box being connected to an external storage device, and displaying the recording interface in the external storage device in a menu of the set top box, according to the user's selection. Playback instructions.

When the second set top box receives the playback instruction, comparing the second identification information of the second set top box with the first identification information corresponding to the played back recorded program may include steps 3110 to 3140.

In step 3110, when the second set top box is connected to the external storage device, the information of the encrypted program stored in the external storage device is read, and the recorded content carried by the external storage device is displayed in the menu.

In step 3120, the second set top box receives the user's selection operation and generates a playback instruction according to the selection operation.

In step 3130, the second set top box acquires the corresponding encrypted program according to the playback instruction, and acquires metadata information corresponding to the encrypted program, where the metadata information includes the first identification information and the first recording key.

In step 3140, the second set top box reads the first identification information in the metadata information, and compares the first identification information with the second identification information.

In step 320, if the first identification information is different from the second identification information, the second set top box sends the second identification information, the first identification information, and the first recording key corresponding to the recorded program to the PMS.

For example, when the second identification information is different from the first identification information, the recorded program is not recorded by the second set top box. At this point, the random key can be obtained through the PMS. Transmitting the second identification information, the first identification information, and the first recording key corresponding to the recorded program to the PMS, so that the PMS is determined according to the second identification information, the first identification information, and the first recording key. Decrypting the second recording key of the encrypted program in the second set top box.

When the second identification information is the same as the first identification information, if the recorded program is recorded by the second set top box, then the first recording key is decrypted to obtain the random key; and the random key pair is utilized. The encrypted program is decrypted to effect playback of the encrypted program. The set top box can set the first recording key to the encryption engine to decrypt the random key.

In step 330, the PMS generates a second recording key according to the second identification information, the first identification information, and the first recording key.

For example, after receiving the second identifier information, the PMS determines whether the second set top box corresponding to the second identifier information has playback rights, and generates a second recording key when the second set top box has the recording authority.

Optionally, the step 330 may include step 3310 - step 3330.

In step 3310, the PMS determines, according to the second identification information, whether the second set top box has playback rights. For example, the PMS searches for the playback rights of the corresponding second set top box in the database according to the second identification information.

In step 3320, when the second set top box has playback rights, the PMS decrypts the first recording key according to the first identification information to obtain a random key. For example, the PMS determines a corresponding first private key according to the first identification information, and decrypts the first recording key by using the first private key to obtain a random key.

In step 3330, the random key is encrypted according to the second private key corresponding to the second identification information to generate a second recording key. For example, the PMS determines and acquires a second private key of the second set top box according to the second identification information, encrypts the random key by using the second private key, generates a second recording key, and The second recording key is fed back to the second set top box.

In step 340, the second set top box decrypts the second recording key to obtain the random key, and decrypts the encrypted program by using the random key to obtain a decrypted program to implement subsequent Playing the decrypted program. For example, the second set top box sets the second recording key to the encryption engine, decrypts the second recording key to obtain the random key, and decrypts the recorded program by using the random key to obtain The encrypted audio and video data is played and played back to play back the recorded program.

The playback process provided by this embodiment determines whether the recorded program being played back is recorded by the local device, and if not recorded by the local device, acquires a random key through the PMS system, and decrypts the random key by using the random key. Recording the program, sharing the recorded program. The playback method provided in this embodiment breaks the one-to-one mode of the traditional PVR program, and realizes a one-to-many flexible manner; and, breaks the limitation between the various hardware platforms, and records the content recorded from one platform to another platform. It can still be used to realize the sharing of PVR programs. At the same time, in the process of recording and playing back the program, various protection measures can be added to the front end to enhance the protection of the recorded content. For example, a time stamp can be added in META DATA to control the effective time limit of the program, and a second charge can be performed. For example, the content recorded on STB1 is placed on STB2 for viewing, and STB2 itself does not purchase related program packages, etc., making the management of the front end more convenient and flexible.

The embodiment further provides a PVR protection method, and the method further includes a playback process. As shown in FIG. 4, the playback process may include steps 402-426.

In step 402, the set top box is connected to the external storage device, and displays the information of the recorded program carried by the external storage device on the menu of the set top box, and receives the user's selection operation.

In step 404, a play command is generated according to the selecting operation, and the set top box reads the metadata META DATA corresponding to the recorded program RECORD CONTENT to be played back according to the play instruction; if the reading fails, step 426 is executed to end the play and prompt User; if the reading is successful, step 406 is performed.

In step 406, the set-top box reads the chip number CHIP ID of the local machine as CHIP ID2, compares the CHIP ID2 with the CHIP ID1 in META DATA, and if CHIP ID1 and CHIP ID2 are equal, step 408 is performed; otherwise, Go to step 412.

In step 408, set top box STB1 sets RECORD KEY1 in META DATA to the encryption engine to decrypt the PVR KEY.

In step 410, the set top box STB1 decrypts the recorded content RECORD CONTENT by using the PVR KEY, obtains the decrypted audio and video data and completes the playing, and the process ends.

In step 412, set top box STB2 sends the META DATA data and CHIP ID2 over the network to the PMS.

In step 414, the PMS retrieves the database to determine whether the set top box STB2 has playback rights: if the set top box STB2 is allowed to play, step 416 is performed; otherwise, the PMS returns the unplayable rights information to the STB2 via the network and performs step 420. .

In step 416, the PMS decrypts the RECORD KEY1 according to the first private key SK1 corresponding to the CHIP ID1 to obtain the PVR KEY, and then encrypts the PVR KEY with the second private key SK2 corresponding to the CHID ID2 to obtain the RECORD KEY2.

In step 418, the PMS returns the playback rights of STB2 and RECORD KEY2 to the set top box STB2 over the network.

In step 420, the set top box STB2 determines the return result of the PMS: if playback is allowed, step 422 is performed, and if playback is not allowed, step 426 is performed.

In step 422, the set top box STB2 sets RECORD KEY2 to the encryption engine to decrypt the PVR KEY.

In step 424, the set top box STB2 reads the recorded content RECORD CONTENT, and decrypts the RECORD CONTENT using the PVR KEY to obtain the decrypted audio and video data and complete the playing.

In step 426, playback is stopped.

This embodiment further provides a PVR protection system, as shown in FIG. 5, which may include: a set top box 100 and a PVR management system PMS200.

As shown in FIG. 6, the set top box 100 may include: a first sending module 101, and a first decrypting module. 102 and save module 103.

The first sending module 101 is configured to: when the recording instruction is triggered, send, to the PVR management system PMS, the request information for acquiring the first recording key, where the request information includes the first identifier of the first set top box information. The first decryption module 102 is configured to decrypt the first recording key to obtain a random key, and encrypt the descrambled audio and video data by using the random key to obtain an encrypted program. The saving module 103 is configured to save the encrypted program to an external storage device to implement PVR encrypted recording.

The management system PMS200 is configured to generate a random key according to the request information, and encrypt the random key according to the first private key corresponding to the first identification information to obtain a first recording key.

Optionally, the set top box further includes: a comparison module 104, a second sending module 105, and a second decryption module 106. The comparison module 104 is configured to read the encrypted program, the first identification information, and the first recording key from the external storage device when the playback instruction is triggered, and set the second identification information of the second identification information. The first identification information corresponding to the recorded recorded program is compared. The second sending module 105 is configured to: when the second identifier information is different from the first identifier information, send the second identifier information, the first identifier information, and the first recording key corresponding to the recorded program to PMS. The PVR management system PMS200 is further configured to: generate a second recording key according to the second identifier information, the corresponding first identifier information, and the first recording key.

The set top box 100 may further include: a second decryption module 106 configured to decrypt the second recording key to obtain the random key, and decrypt the encrypted program by using the random key to obtain a decrypted program To achieve subsequent playback of the decrypted program. Optionally, the set top box further includes: a third decryption module 107, configured to decrypt the first recording key to obtain the random key when the second identifier information is the same as the first identifier information And decrypting the encrypted program by using the random key to obtain the decrypted program.

The set top box may include a plurality of set top boxes, and each of the set top boxes may be configured with the first sending module 101, the first decrypting module 102, the saving module 103, the comparing module 104, the second sending module 105, and the second decrypting module 106. The third decryption module 107, for example, the set top box may include a first set top box and a second set top box, and the corresponding operations may be performed by the first sending module, the first decrypting module, the saving module, and the third decrypting module disposed in the first set top box. Encrypted recording of the program by the first set top box; the comparison module, the second sending module and the second decrypting module set by the second set top box perform the corresponding operations, and the second set top box inputs the encrypted program recorded by the first set top box Decryption, program playback, and resource sharing of encrypted programs between multiple set-top boxes. Each of the above modules of the PVR protection system has been described in detail in the above method and will not be described here.

This embodiment further provides a personal video recording PVR protection method, which can be applied to a PVR management system PMS. As shown in FIG. 7, the method may include steps 710-760.

In step 710, the request information for acquiring the first recording key sent by the first set top box is received, where the request information includes first identification information of the first set top box.

In step 720, determining, according to the first identification information, whether the first set top box has recording authority; when the first set top box has recording permission, generating a random key, and according to the first identification information and the The random key is obtained to obtain the first recording key.

In step 730, the first recording key is sent to the first set top box, so that the first set top box decrypts the first recording key to obtain the random key, and the random key is utilized. Encrypting the encrypted data stream to obtain an encrypted data stream, so that the second set top box acquires the encrypted data stream, the first identification information, and the first recording key.

In step 740, the first identification information, the first recording key, and the second identification information of the second set top box sent by the second set top box are received, where the second set top box is different from the first set top box. Set-top box.

In step 750, determining, according to the second identifier information, whether the second set top box has a play permission; and when the second set top box has a play right, the first record key is used according to the first identifier information. Performing decryption to obtain the random key; and obtaining a second recording key according to the second identification information and the random key.

In step 760, the second recording key is sent to the second set top box, so that the second set top box decrypts the second recording key, the random key is obtained, and the random key is utilized. The key decrypts the encrypted data stream to obtain a decrypted data stream.

Optionally, the determining, according to the first identifier information, whether the first set top box has the recording permission comprises: acquiring the recording authority information of the first set top box according to the first identifier information; The recording permission information of the set top box determines whether the first set top box has recording permission.

Optionally, the determining, according to the second identifier information, whether the second set top box has the play permission, the method includes: acquiring the play permission information of the second set top box according to the second identifier information; The permission information determines whether the second set top box has a play permission.

Optionally, when the first set top box has the recording permission, generate a random key, and obtain the first recording key according to the first identification information and the random key, including: First When the set-top box has the recording permission, the random key is generated, and the first private key of the first set-top box is obtained according to the first identification information; and the random key is encrypted according to the first private key, The first recording key.

Optionally, the obtaining, according to the second identifier information, the second record key, the second private key of the second set top box is obtained according to the second identifier information; The second private key encrypts the random key to obtain a second recording key.

The embodiment further provides a personal video recording PVR protection method, which can be applied to the first set top box. As shown in FIG. 8, the method may include steps 810- 830.

In step 810, the request information of the first recording key is sent to the management system PMS of the PVR, where the request information includes first identification information of the first set top box, so that the PMS is based on the first identifier. Determining whether the first set top box has recording permission, and generating a random key when the first set top box has recording permission, and obtaining and reporting the first identification information according to the first identification information and the random key The first set top box sends the first recording key.

In step 820, the first recording key sent by the management system PMS of the PVR is received.

In step 830, the first recording key is decrypted to obtain the random key, and the data stream to be encrypted is encrypted by the random key to obtain an encrypted data stream.

Optionally, the decrypting the first recording key to obtain the random key comprises: decrypting the first recording key by using a first private key corresponding to the first identification information, to obtain The random key.

This embodiment further provides a personal video recording PVR protection method, which can be applied to a second set top box. As shown in FIG. 9, the method may include steps 910-930.

In step 910, the encrypted data stream after the first set top box is encrypted, the first identification information of the first set top box, and the first recording key are obtained, where the first recording key is a PVR management system PMS. When the first set top box has recording permission, it is obtained according to the generated random key and the first identification information.

In step 920, the first identifier information, the first recording key, and the second identifier information of the second set top box are sent to the PMS, so that the PMS determines according to the second identifier information. Whether the second set top box has the playing right, and when the second set top box has the playing right, decrypting the first recording key according to the first identification information, obtaining the random key, and according to the Decoding the second identification information and the random key to obtain a second recording key, and sending the second recording key to the second set top box.

In step 930, receiving the second recording key sent by the management system PMS of the PVR; decrypting the second recording key to obtain the random key, and using the random key to pair the encrypted data The stream is decrypted to obtain a decrypted data stream.

Optionally, the decrypting the second recording key to obtain the random key comprises: decrypting the second recording key by using a second private key corresponding to the second identifier information, to obtain The random key.

The first set top box and the second set top box are interchangeable, that is, the first set top box can also realize encrypted recording of the program, and the second set top box can realize decryption and playing of the program, and the first set top box and the second set top box can execute the program. The steps of decryption and program decryption.

The embodiment also provides a PVR management system PMS. As shown in FIG. 10, the system may include:

The receiving module 1010 is configured to: receive request information for acquiring a first recording key sent by the first set top box, where the request information includes first identifier information of the first set top box.

The authority judging module 1020 is configured to: determine, according to the first identifier information, whether the first set top box has recording authority.

The key processing module 1030 is configured to: when the first set top box has recording permission, generate a random key, and obtain the first recording key according to the first identification information and the random key.

The data processing module 1040 is configured to: send the first recording key to the first set top box, so that the first set top box decrypts the first recording key to obtain the random key, by using the The random key encrypts the encrypted data stream to obtain an encrypted data stream, so that the second set top box acquires the encrypted data stream, the first identification information, and the first recording key.

The receiving module 1010 is further configured to: receive the first identifier information sent by the second set top box, the first recording key, and second identifier information of the second set top box, where the second set top box is first Set-top boxes are different set-top boxes.

The authority determining module 1020 is further configured to: determine, according to the second identifier information, whether the second set top box has a play right.

The key processing module 1030 is further configured to: when the second set top box has a play permission, decrypt the first record key according to the first identifier information, to obtain the random key; The second identification information and the random key obtain a second recording key.

The data processing module 1040 is further configured to: send the second recording key to the second set top box, so that the second set top box decrypts the second recording key to obtain the random key, and Profit Decrypting the encrypted data stream with the random key results in a decrypted data stream.

Optionally, the permission judging module 1020 is configured to: obtain the recording permission information of the first set top box according to the first identification information; and determine, according to the recording permission information of the first set top box, whether the first set top box has Recording authority; obtaining, according to the second identifier information, the playing permission information of the second set top box; and determining, according to the playing right information, whether the second set top box has a playing right.

The key processing module 1030 is configured to: when the first set top box has recording permission, generate a random key, and acquire a first private key of the first set top box according to the first identification information; A private key encrypts the random key to obtain the first recording key.

The key processing module 1030 is further configured to: acquire a second private key of the second set top box according to the second identification information; and encrypt the random key according to the second private key to obtain a second Record the key.

The device embodiments described above are merely illustrative. For example, the division of the modules is only a logical function division. In actual implementation, there may be another division manner. For example, multiple units or components may be combined or integrated. Go to another system, or some features can be ignored or not executed. The mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in electrical, mechanical or other form.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, the plurality of functional units in the embodiment may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of hardware plus software functional units.

The above-described integrated unit implemented in the form of a software functional unit can be stored in a computer readable storage medium. The above software functional unit is stored in a storage medium and includes a plurality of instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) or a processor to execute all of the methods described in this embodiment. Or part of the steps. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like, which can store program codes. .

The embodiment further provides a computer readable storage medium storing computer executable instructions for performing any of the above methods.

As shown in FIG. 11 , it is a hardware structure diagram of a PVR management device provided by this embodiment. As shown in FIG. 11 , the PVR management device includes: a processor 1110 and a memory 1120. Communication Interface 1130 and Bus 1140.

The processor 1110, the memory 1120, and the communication interface 1130 can complete communication with each other through the bus 1140. Communication interface 1130 can be used for information transmission. The processor 1110 can invoke logic instructions in the memory 1120 to perform the respective methods provided by the above embodiments.

As shown in FIG. 12, it is a hardware structure diagram of a set top box provided by this embodiment. As shown in FIG. 12, the set top box includes: a processor 1210 and a memory 1220; and may further include a communication interface 1230 and a bus 1240.

The processor 1210, the memory 1220, and the communication interface 1230 can complete communication with each other through the bus 1240. Communication interface 1230 can be used for information transfer. The processor 1210 can invoke logic instructions in the memory 1220 to perform the respective methods provided by the above embodiments.

Both the memory 1120 and the memory 1220 may include a storage program area and a storage data area, and the storage program area may store an operating system and an application required for at least one function. The storage data area can store data and the like created according to the use of the electronic device. Further, the memory may include, for example, a volatile memory of a random access memory, and may also include a non-volatile memory. For example, at least one disk storage device, flash memory device, or other non-transitory solid state storage device.

Moreover, when any of the logic instructions in memory 1120 and memory 1220 described above can be implemented in the form of a software functional unit and sold or used as a stand-alone product, the logic instructions can be stored in a computer readable storage medium. The technical solution of the present disclosure may be embodied in the form of a computer software product, which may be stored in a storage medium, and includes a plurality of instructions for causing a computer device (which may be a personal computer, a server, a network device, etc.) All or part of the steps of the corresponding method provided by the embodiment are performed.

The storage medium may be a non-transitory storage medium or a transitory storage medium. The non-transitory storage medium may include: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like, which can store program codes. medium.

All or part of the process in the above embodiment method can be indicated by a computer program. The hardware is completed, and the program can be stored in a non-transitory computer readable storage medium. When the program is executed, the flow of the embodiment of the above method can be implemented.

Industrial applicability

The present disclosure provides a PVR protection method for generating a random key for encrypting and recording a program through a PMS, and acquiring the random key through a PMS during playback, and decrypting the program by the random key, so that the program is recorded except Other set-top boxes other than the set-top box can also play back the encrypted recorded program to share the recorded program.

Claims

A personal video recording PVR protection method includes a recording process, and the recording process includes:

When the recording instruction of the first set top box is triggered, the first set top box sends request information for acquiring the first recording key to the management system PMS of the PVR, where the request information includes the first identification information of the first set top box. ;

The PMS receives the request information and generates a random key, and encrypts the random key according to the first private key corresponding to the first identification information to obtain the first recording key, and sends the Decoding a first recording key to the first set top box;

Receiving, by the first set top box, the first recording key to obtain the random key, and encrypting the descrambled audio and video data by using the random key to obtain an encrypted program;

The first set top box saves the encrypted program to an external storage device to implement PVR encrypted recording.
The method according to claim 1, wherein the PMS receives the request information and generates a random key, and encrypts the random key according to the first private key corresponding to the first identification information to obtain After the first recording key and sending the first recording key to the first set top box, the method further includes:

The first set top box establishes an association relationship between the first identification information and the first recording key, and stores the association relationship in the external storage device.
The method according to claim 1, wherein the PMS generates a random key according to the request information, and encrypts the random key according to the first private key corresponding to the first identification information to obtain The first recording key includes:

The PMS queries, according to the first identification information, whether the first set top box has recording permission;

When the first set top box has the recording permission, the PMS generates a random key according to the request information, and encrypts the random key according to the first private key corresponding to the first identification information to obtain the first A recording key.
The method of claim 2, wherein the method further comprises: a PVR playback process, the PVR playback process comprising:

When the second set top box receives the playback instruction, the encrypted program, the first identification information, and the first recording key are read from the external storage device, and the second identification information of the second set top box is The first identification information is compared;

When the second identification information is different from the first identification information, the second set top box sends the second identification information, the first identification information, and the first recording key to the PMS ;

The PMS is configured according to the second identifier information, the first identifier information, and the first recorded secret The key generates a second recording key;

The second set top box decrypts the second recording key to obtain the random key, and decrypts the encrypted program by using the random key to obtain a decrypted program, and plays the decrypted program.
The method of claim 4, wherein comparing the second identification information of the second set top box with the first identification information further comprises:

When the second identification information is the same as the first identification information, the second set top box decrypts the first recording key according to the second identification information to obtain the random key;

The second set top box decrypts the encrypted program by using the random key to obtain the decrypted program, and plays the decrypted program.
The method of claim 4, wherein the generating, by the PMS, the second recording key according to the second identification information, the first identification information, and the first recording key comprises:

Decrypting the first recording key by the PMS according to the first private key corresponding to the first identification information to obtain the random key;

The PMS encrypts the random key according to the second private key corresponding to the second identification information to generate the second recording key.
The method of claim 4, wherein before the PMS generates the second recording key according to the second identification information, the first identification information, and the first recording key, the method further includes:

The PMS determines, according to the second identifier information, whether the second set top box has playback rights, and when the second set top box has recording rights, performs the step of generating the second recording key.
A personal video recording PVR protection system includes: a set top box and a PVR management system PMS;

The set top box includes: a first sending module, a first decrypting module, and a saving module;

The first sending module is configured to: when the recording instruction is triggered, send the request information for acquiring the first recording key to the PMS management system PMS, where the request information includes the first identification information of the set top box;

The first decryption module is configured to decrypt the first recording key to obtain a random key, and use the random key to encrypt the descrambled audio and video data to obtain an encrypted program;

The saving module is configured to save the encrypted program to an external storage device to implement PVR encrypted recording;

a management system PMS, configured to receive the request information and generate a random key, according to the The first private key corresponding to the identification information encrypts the random key to obtain a first recording key.
The PVR protection system of claim 8, wherein the set top box further comprises: a comparison module, a second sending module, and a second decryption module;

The comparing module is configured to: when the playback instruction is triggered, read the encrypted program, the first identification information, and the first recording key from the external storage device, and obtain the second identification information and The first identification information is compared;

The second sending module is configured to: when the second identifier information is different from the first identifier information, send the second identifier information, the first identifier information, and the first recording key corresponding to the recorded program to the PMS;

a second decryption module, configured to decrypt the second recording key to obtain the random key, and decrypt the encrypted program by using the random key to obtain a decrypted program;

The PMS is further configured to generate a second recording key according to the second identification information, the first identification information, and the first recording key.
The PVR protection system of claim 9, wherein the set top box further comprises:

a third decryption module, configured to: when the second identification information is the same as the first identification information, decrypt the first recording key to obtain the random key, and use the random key pair to The encrypted program is decrypted to obtain the decrypted program.
A personal video recording PVR protection method applied to a PVR management system PMS, comprising:

Receiving, by the first set top box, request information for acquiring a first recording key, where the request information includes first identification information of the first set top box;

Determining, according to the first identifier information, whether the first set top box has recording permission;

When the first set top box has the recording permission, generating a random key, and obtaining the first recording key according to the first identification information and the random key;

Transmitting the first recording key to the first set top box, so that the first set top box decrypts the first recording key to obtain the random key, and the data stream to be encrypted by using the random key Performing encryption to obtain an encrypted data stream, so that the second set top box acquires the encrypted data stream, the first identification information, and the first recording key;

Receiving, by the second set top box, the first identification information, the first recording key, and the second identification information of the second set top box, where the second set top box and the first set top box are different set top boxes;

Determining, according to the second identifier information, whether the second set top box has a play permission;

Decrypting the first recording key according to the first identification information to obtain the random key when the second set top box has a play permission;

Obtaining a second recording key according to the second identification information and the random key;

Transmitting the second recording key to the second set top box, so that the second set top box decrypts the second recording key, obtaining the random key, and decrypting the encryption by using the random key The data stream gets the decrypted data stream.
The method according to claim 11, wherein the determining, according to the first identification information, whether the first set top box has recording rights comprises:

Acquiring the recording permission information of the first set top box according to the first identifier information;

Determining, according to the recording permission information of the first set top box, whether the first set top box has recording permission;

Determining, according to the second identifier information, whether the second set top box has a play permission, including:

Obtaining the playing right information of the second set top box according to the second identifier information;

Determining whether the second set top box has a play permission according to the play permission information.
The method according to claim 11, wherein when the first set top box has recording authority, a random key is generated, and the first recording is obtained according to the first identification information and the random key. Key, including:

Generating a random key when the first set top box has the recording permission, and acquiring the first private key of the first set top box according to the first identification information;

And encrypting the random key according to the first private key to obtain the first recording key.
The method according to claim 11, wherein the obtaining the second recording key according to the second identification information and the random key comprises:

Obtaining, according to the second identifier information, a second private key of the second set top box;

Encrypting the random key according to the second private key to obtain a second recording key.
A personal video recording PVR protection method is applied to a first set top box, including:

Sending the request information of the first recording key to the management system PMS of the PVR, where the request information includes the first identification information of the first set top box, so that the PMS determines the according to the first identification information. Whether the first set top box has the recording permission, and when the first set top box has the recording permission, generates a random key, and obtains and sends the first set top box according to the first identification information and the random key. Describe the first recording key;

Receiving the first recording key sent by the management system PMS of the PVR;

Decrypting the first recording key to obtain the random key, and encrypting the data stream to be encrypted by using the random key to obtain an encrypted data stream.
The method of claim 15, wherein the decrypting the first recording key to obtain the random key comprises:

Decrypting the first recording key by using a first private key corresponding to the first identifier information to obtain the random key.
A personal video recording PVR protection method is applied to a second set top box, including:

Acquiring the encrypted data stream after the first set top box is encrypted, the first identification information of the first set top box, and the first recording key, wherein the management system PMS whose first recording key is a PVR is recorded in the first set top box When the permission is obtained, according to the generated random key and the first identification information;

Sending, by the PMS, the first identification information, the first recording key, and the second identification information of the second set top box, so that the PMS determines the second set top box according to the second identification information. Whether there is a play permission, and when the second set top box has a play permission, decrypting the first record key according to the first identifier information, obtaining the random key, and according to the second identifier information And obtaining the second recording key by using the random key, and sending the second recording key to the second set top box;

Receiving the second recording key sent by the management system PMS of the PVR;

Decrypting the second recording key to obtain the random key, and decrypting the encrypted data stream by using the random key to obtain a decrypted data stream.
The method of claim 17, wherein the decrypting the second recording key to obtain the random key comprises:

Decrypting the second recording key by using a second private key corresponding to the second identifier information to obtain the random key.
A PVR management system PMS, comprising:

The receiving module is configured to: receive the request information for acquiring the first recording key sent by the first set top box, where the request information includes the first identification information of the first set top box;

The permission judging module is configured to: determine, according to the first identifier information, whether the first set top box has recording permission;

a key processing module, configured to: when the first set top box has a recording permission, generate a random key, and obtain the first recording key according to the first identification information and the random key;

a key sending module, configured to: send the first recording key to the first set top box, so that the first set top box decrypts the first recording key to obtain the random key, by using the The random key encrypts the encrypted data stream to obtain an encrypted data stream, so that the second set top box acquires the encrypted data stream, the first identification information, and the first recording key;

The receiving module is further configured to: receive the first identification information, the first recording key, and the second identification information of the second set top box sent by the second set top box, where the second set top box and the first set top box For different set top boxes;

The right judging module is further configured to: determine, according to the second identifier information, whether the second set top box has a play permission;

The key processing module is further configured to: when the second set top box has a play permission, decrypt the first record key according to the first identifier information, to obtain the random key; Identifying the information and the random key to obtain a second recording key;

The key sending module is further configured to: send the second recording key to the second set top box, so that the second set top box decrypts the second recording key to obtain the random key, and Decrypting the encrypted data stream with the random key results in a decrypted data stream.
A computer readable storage medium storing computer executable instructions for performing the method of any of claims 1-7 and 11-18.