WO2023246585A1

WO2023246585A1 - Authorization control method, apparatus and system, and electronic device and storage medium

Info

Publication number: WO2023246585A1
Application number: PCT/CN2023/100174
Authority: WO
Inventors: 陈志伟
Original assignee: 中兴通讯股份有限公司
Priority date: 2022-06-20
Filing date: 2023-06-14
Publication date: 2023-12-28
Also published as: CN117319691A

Abstract

Disclosed are an authorization control method, apparatus and system, and an electronic device and a storage medium, which belong to the technical field of electrical communications. The method comprises: receiving an encrypted second authorization file; decrypting the second authorization file by means of a built-in secret key and a decryptor, wherein the secret key and the decryptor are built into a read-only memory (ROM) of a uni-directional DVB terminal; and in response to the decryption being passed, updating an existing first authorization file of the uni-directional DVB terminal according to the decrypted second authorization file.

Description

Authorization control methods, devices, systems, electronic equipment and storage media

Cross-references to related applications

This disclosure claims the priority of Chinese patent application CN202210700456.3 titled "Authorization Control Method, Device, System, Electronic Equipment and Storage Medium" submitted on June 20, 2022, the entire content of which is incorporated into this disclosure by reference. .

Technical field

The present disclosure relates to the field of electronic communication technology, and in particular, to an authorization control method, device, system, electronic equipment and storage medium.

Background technique

DVB (Digital Video Broadcasting) is a market-oriented digital service architecture that can be divided into front-end systems, transmission systems and terminal systems according to the order of signal propagation. The front-end system mainly refers to the information source part of the digital TV network. It is the exchange center for TV program information. It is the core part of the entire digital cable TV system and is generally located in program production departments such as TV stations. The terminal system mainly refers to the information sink of the digital TV network. Part, mainly provided for digital TV users, generally refers to user terminal equipment such as set-top boxes.

One-way DVB terminal is a media playback device that complies with DVB standards (DVB-S, DVB-C, DVB-T, DVB-SMATV, DVB-MS and DVB-MC). It uses a one-way content transmission function and the front end sends content , the terminal receives. Due to the one-way nature of content transmission, DVB terminals can only passively receive DVB broadcast data. After the DVB terminal is sold, the DVB terminal manufacturer cannot control the terminal and is very passive in the event of business disputes.

Contents of the invention

Embodiments of the present disclosure provide an authorization control method, device, electronic device, and storage medium.

According to an aspect of an embodiment of the present disclosure, an authorization control method is provided, which is suitable for one-way digital video broadcasting DVB terminals, including: receiving an encrypted second authorization file; and verifying the second authorization file through a built-in key and decryptor. The authorization file is decrypted, wherein the key and the decryptor are built in the read-only memory ROM of the one-way DVB terminal; and in response to the decryption passing, the one-way DVB terminal is decrypted according to the decrypted second authorization file. The existing first authorization file of the DVB terminal is updated.

According to another aspect of the embodiment of the present disclosure, an authorization control method is also provided, which is suitable for the control end of a one-way digital video broadcasting DVB terminal, including: configuring a second authorization file; and calculating a calibration of the second authorization file. The second authorization file and the verification data are encrypted to obtain an encrypted second authorization file.

According to another aspect of the embodiment of the present disclosure, a first authorization control device suitable for one-way digital video broadcasting DVB terminal is also provided. The first authorization control device includes: a receiving module configured to receive an encrypted a second authorization file; a decryption module configured to decrypt the second authorization file through a built-in key and decryptor, wherein the key and decryptor are built into the read-only memory of the one-way DVB terminal in the ROM; and an update module configured to, in response to the decryption pass, update the existing first authorization file of the one-way DVB terminal according to the decrypted second authorization file.

According to another aspect of the embodiment of the present disclosure, a second authorization control device suitable for a control end of a one-way digital video broadcasting DVB terminal is also provided. The second authorization control device includes: a configuration module configured to configure the first two authorization files; and an encryption module configured to calculate verification data of the second authorization file, encrypt the second authorization file and the verification data, and obtain an encrypted second authorization file.

According to another aspect of the embodiment of the present disclosure, an authorization control system is also provided, including a one-way digital video broadcasting DVB terminal and a control end, where the one-way DVB terminal includes the first authorization control device as described above; The control end includes the second authorization control device as described above.

According to another aspect of the embodiment of the present disclosure, an electronic device is also provided. The electronic device includes a memory, a processor, and a computer program stored on the memory and executable on the processor. The computer When the program is executed by the processor, the authorization control method as described in any of the above items is implemented.

According to another aspect of the embodiment of the present disclosure, a storage medium is also provided. A computer program is stored on the storage medium. When the computer program is executed by a processor, the authorization control method as described in any one of the above items is implemented.

Embodiments of the present disclosure also provide a computer program product containing instructions that, when run on a computer, cause the computer to execute any of the authorization control methods described above.

Description of the drawings

The drawings described here are used to provide a further understanding of the present disclosure and constitute a part of the present disclosure. The illustrative embodiments of the present disclosure and their descriptions are used to explain the present disclosure and do not constitute an improper limitation of the present disclosure. In the attached picture:

Figure 1 is a hardware structural block diagram of a computer according to an embodiment of the present disclosure;

Figure 2 is a schematic flow chart of an authorization control method suitable for one-way digital video broadcasting DVB terminals according to an embodiment of the present disclosure;

Figure 3 is a schematic flow chart of the steps after updating the existing first authorization file of the one-way DVB terminal according to the decrypted second authorization file in an embodiment of the present disclosure;

Figure 4 is a flow chart of an authorization control method suitable for the control end of a one-way digital video broadcast DVB terminal according to an embodiment of the present disclosure;

Figure 5 is a schematic diagram of the authorization file production process in an implementation scenario of the embodiment of the present disclosure;

Figure 6 is a schematic diagram of the sending process of an updated authorization file in an implementation scenario of an embodiment of the present disclosure;

Figure 7 is a schematic diagram of the control flow of an authorization file in an implementation scenario of an embodiment of the present disclosure;

Figure 8 is a structural block diagram of a first authorization control device suitable for one-way digital video broadcasting DVB terminal according to an embodiment of the present disclosure; and

Figure 9 is a structural block diagram of a second authorization control device suitable for the control end of a one-way digital video broadcast DVB terminal according to an embodiment of the present disclosure.

Detailed ways

In order to enable those skilled in the art to better understand the present disclosure, the following will clearly and completely describe the technical solutions in the present disclosure embodiments in conjunction with the accompanying drawings. Obviously, the described embodiments are only These are part of the embodiments of this disclosure, not all of them. Based on the embodiments in this disclosure, all other embodiments obtained by those of ordinary skill in the art without creative efforts should fall within the scope of protection of this disclosure. It should be noted that, as long as there is no conflict, the embodiments and features in the embodiments of the present disclosure can be combined with each other.

It should be noted that the terms "first", "second", etc. in the description and claims of the present disclosure and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It is to be understood that the data so used are interchangeable under appropriate circumstances so that the embodiments of the disclosure described herein can be practiced in sequences other than those illustrated or described herein. Furthermore, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, e.g., a process, method, product or apparatus that encompasses a series of steps or units need not be limited to those steps explicitly listed or units, but may include other steps or units not expressly listed or inherent to such processes, methods, products or devices.

The method embodiments provided by the embodiments of the present disclosure can be executed on a mobile phone, computer, tablet, or similar computing device. Taking running on a computer as an example, FIG. 1 is a hardware structure block diagram of a computer according to an embodiment of the present disclosure. As shown in Figure 1, the computer may include one or more (only one is shown in Figure 1) processors 102 (the processor 102 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA) and A memory 104 for storing data. Optionally, the above-mentioned computer may also include a transmission device 106 and an input and output device 108 for communication functions. Persons of ordinary skill in the art can understand that the structure shown in Figure 1 is only illustrative and does not limit the structure of the above-mentioned computer. For example, the computer may also include more or fewer components than shown in FIG. 1 , or have a different configuration than that shown in FIG. 1 .

The memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as a computer program corresponding to an authorization control method in an embodiment of the present disclosure. The processor 102 runs the computer program stored in the memory 104, thereby Execute various functional applications and data processing, that is, implement the above methods. Memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, memory 104 may further include memory located remotely from processor 102, and these remote memories may be connected to the computer through a network. Examples of the above-mentioned networks include but are not limited to the Internet, intranets, local area networks, mobile communication networks and combinations thereof.

Transmission device 106 is used to receive or send data via a network. Examples of the networks described above may include wireless networks provided by the computer's communications provider. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, NIC for short), which can be connected to other network devices through a base station to communicate with the Internet. In one example, the transmission device 106 may be a radio frequency (Radio Frequency, RF for short) module, which is used to communicate with the Internet wirelessly.

This embodiment provides an authorization control method. Figure 2 is a schematic flow chart of an authorization control method suitable for one-way digital video broadcasting DVB terminals according to an embodiment of the present disclosure. As shown in Figure 2, the process includes the following Steps S11 to S13.

Step S11: Receive the encrypted second authorization file.

The authorization control method proposed in the embodiments of the present disclosure is applicable to one-way digital video broadcasting DVB terminals. The one-way digital video broadcasting DVB terminals can be set-top boxes, receiving cards, digital televisions, mobile devices, etc. that transmit one-way content.

DVB terminal manufacturers generate encrypted second authorization files through specific computer tool configurations. In some implementations, terminal manufacturers can send the encrypted second authorization files to one-way digital video broadcasters through serial ports or burning tools. DVB terminal: The DVB terminal receives the encrypted second authorization file produced by the terminal manufacturer through the serial port or burning tool. Generally, this method of receiving the encrypted second authorization file is used in the production process before the DVB terminal leaves the factory.

In other implementations, the terminal manufacturer can also convert the encrypted second authorization file into a code stream of the standard DVB protocol through a DVB code stream converter, and then broadcast the code stream of the DVB standard second authorization file on the front end. The DVB terminal receives the code stream data of the encrypted second authorization file through a cable channel or a satellite channel. Generally, this method is used in scenarios after the DVB terminal is sold.

Step S12: Decrypt the second authorization file using the built-in key and decryptor. The key and decryptor are built into the read-only memory ROM of the one-way DVB terminal.

In this disclosed embodiment, after receiving the encrypted second authorization file, the encrypted second authorization file needs to be decrypted. The decryption method is implemented through a key and decryptor built in the DVB terminal. The key is represented as a piece of data, and the decryptor is represented as an algorithm. The key and the encrypted second authorization file are input into the decryptor. The decryptor verifies the correctness of the key and decrypts the encrypted authorization file to obtain the decryption. explicit authorization document. The key and decryptor are built into the read-only memory ROM of the one-way DVB terminal. The key and decryptor can be directly written into the ROM of the DVB terminal during the production process of the DVB terminal.

Step S13, if the decryption is successful, the existing first authorization file of the one-way DVB terminal is updated according to the decrypted second authorization file.

After the encrypted first authorization file is decrypted, the embodiment of the present disclosure updates the existing first authorization file of the one-way DVB terminal based on the decrypted second authorization file, and replaces and updates the existing first authorization file with the second authorization file. 2. Authorization documents.

The embodiment of the present disclosure receives the encrypted second authorization file, decrypts the second authorization file according to the key and decryptor built in the read-only memory ROM of the one-way DVB terminal, and then decrypts the second authorization file according to the decrypted second authorization file. The existing first authorization file of the one-way DVB terminal is updated, which enables the authorization file to be updated remotely after the DVB terminal is sold, solving the technical problem that related technical terminal manufacturers cannot perform authorization control on the one-way DVB terminal. .

Referring to Figure 3, Figure 3 is a schematic flow chart of the steps after updating the existing first authorization file of the one-way DVB terminal according to the decrypted second authorization file in the embodiment of the present disclosure. In the embodiment of the present disclosure, after step S13 , the method also includes steps S14 to S16.

S14, obtain the current time and the validity time of the second authorization file.

In the embodiment of the present disclosure, the authorization file has a validity period. If the specified validity period is exceeded, the authorization file is invalid.

In an embodiment, the current time can be obtained by installing a clock chip, or by a DVB terminal through wireless or wired broadcasting. The validity time of the second authorization file is the information contained in the authorization file. Decrypt the file to obtain the validity period specified in the authorization file.

S15: Determine whether the authorization has expired based on the current time and validity time.

If the current time obtained exceeds the validity time of the authorization file, it means that the authorization file has expired; if the current time does not exceed the validity time of the authorization file, it means that the authorization file has not expired and is still valid.

S16, if the authorization expires, the live broadcast service of the DVB terminal is disabled.

If the authorization file expires, the embodiment of the present disclosure disables the live broadcast service of the DVB terminal, so that the DVB terminal cannot play the digital video broadcasted by the front end.

In the embodiment of the present disclosure, the authorization file has a validity period. By judging whether the authorization file has expired based on the current time and the validity time of the second authorization file, and if it expires, the live broadcast service of the DVB terminal is disabled, thereby realizing the disabling control of the DVB terminal.

In some implementations of this disclosure, if the decryption is passed, updating the existing first authorization file of the one-way DVB terminal based on the decrypted second authorization file includes: if the decryption is passed, extracting the calibration of the second authorization file. Verification data is used to verify the decrypted authorization file; if the verification passes, the existing first authorization file of the one-way DVB terminal is updated based on the second authorization file.

In order to ensure the correctness of the authorization file, in the embodiment of the present disclosure, the second authorization file that passes the decryption is also verified. The verification method may be parity check, CRC (Cyclic Redundancy Check, cyclic redundancy check), LRC (Longitudinal Redundancy Check), Gray code check, sum check, XOR check, etc. For example, the DVB terminal uses the same preset algorithm used when making the authorization file to calculate the second authorization file to obtain a check value. The check value is compared with the extracted check data of the second authorization file. If calculated test obtained If the value is the same as the check value in the check data, it means that the second authorization file is complete and correct, and the existing first authorization file of the one-way DVB terminal is updated according to the second authorization file.

The embodiment of the present disclosure verifies the second authorization file to ensure the integrity and correctness of the authorization file and prevent errors in the transmission process of the authorization file.

This embodiment also provides an authorization control method. Figure 4 is a flow chart of an authorization control method suitable for the control end of a one-way digital video broadcast DVB terminal according to an embodiment of the present disclosure. As shown in Figure 4, the The process includes the following steps S21 to S22.

S21, configure the second authorization file.

The authorization control method proposed in the embodiment of the present disclosure is applicable to the control end of a one-way digital video broadcasting DVB terminal. The control end can control the DVB terminal, and can be a computer, a mobile phone, a server, or other similar control terminals with computing and processing functions.

The present disclosure implements configuration and generation of the second authorization file through the control terminal, for example, through a computer and using a specific PC tool (Tool) on the computer to configure and generate the second authorization file. Configuring the second authorization file includes configuring at least one of the terminal identification number, terminal batch, expiration date, and file verification of the second authorization file.

S22: Calculate the verification data of the second authorization file, encrypt the second authorization file and the verification data, and obtain the encrypted second authorization file.

In the embodiment of the present disclosure, the method of calculating the check data of the second authorization file may be parity check, CRC check, LRC check, Gray code check, sum check, XOR check, etc.; for the second authorization file The method of encrypting the verification data may be symmetric encryption, asymmetric encryption, single encryption, etc., and is not specifically limited in this disclosed embodiment. In an embodiment, an encryption tool can be used to encrypt the second authorization file. The encryption tool has a built-in key and an encryptor and can encrypt the authorization file.

The embodiment of the present disclosure calculates the verification data of the second authorization file for the configured second authorization file, and encrypts the second authorization file and the verification data, thereby obtaining an encrypted second authorization file.

In some implementations of the embodiments of the present disclosure, after obtaining the encrypted second authorization file, the method further includes: converting the encrypted second authorization file into code stream data of the DVB protocol through a DVB code stream converter; Operate the front-end multiplexer to send code stream data to the DVB terminal.

DVB code stream converter is a conversion tool that converts authorized files into DVB code streams according to the DVB technology protocol. It can convert the encrypted second authorization file into stream data of the DVB protocol.

The front-end multiplexer is a code stream processing device and a very important part of the DVB front-end system. It can combine multiple transport streams into one transport stream for transmission.

During the production process of DVB terminals before leaving the factory, it is more convenient to build the initial authorization file into the ROM of the DVB terminal. For example, the authorization files can be burned directly into the ROM in large quantities. However, after the DVB terminal is sold, this This method is not suitable. Therefore, in the embodiment of the present disclosure, the encrypted second authorization file is converted into code stream data of the DVB protocol through a DVB code stream converter, and the second authorization file stream code stream data can be transmitted in the DVB system, thereby realizing The DVB terminal sends the second authorization file.

In some implementations, before configuring the second authorization file, the method includes: determining whether the control terminal has connected the USB security key; if the control terminal has connected the USB security key, configuring the second authorization file.

USB security key, also called USB security KEY, is a USB interface hardware device with a built-in microcontroller or smart card chip. It has a certain storage space and can store the user's private key and digital certificate, using the USB Key's built-in public key algorithm. Authentication of user identity.

In order to ensure data security, the embodiment of the present disclosure also performs login security identity authentication before configuring the second authorization file on the control end. Confirm the security of the environment in which the authorization file is configured by determining whether the USB security key is connected to the USB interface of the control end.

Below, with reference to Figures 5, 6, and 7, an implementation scenario in the embodiment of the present disclosure will be fully explained.

As shown in Figure 5, Figure 5 is a schematic diagram of the authorization file production process in an implementation scenario of an embodiment of the present disclosure. In the implementation scenario of this disclosure, when the DVB terminal is produced, the PC tool creates an authorization file and embeds the authorization file into the DVB terminal ROM. After the PC tool is started, it detects whether the USB interface is connected to the USB security key. If not, it is not allowed to run. Authorization file production process; if the USB interface security key is connected and started, use PC tools to configure the authorization file information. The configured authorization file includes terminal identification number, terminal batch information, expiration date, file verification and other information, and then calculate Verify the verification data of the authorization file, encrypt the authorization file through the key and encryptor, obtain the encrypted ciphertext authorization file, and embed the encrypted authorization file into the DVB terminal production ROM, where the encryption key is provided by the terminal Provider-held, encryption algorithms are private and built into PC tools.

As shown in FIG. 6 , FIG. 6 is a schematic diagram of the sending process of an updated authorization file in an implementation scenario of an embodiment of the present disclosure. After the DVB terminal with the encrypted authorization file embedded in the above process is sold, if the current authorization file of the terminal needs to be updated, the terminal supplier or manufacturer can refer to the same production process in Figure 5 to create a new authorization file, and then use DVB stream The (code stream) converter converts the authorization file into a stream code stream of the standard DVB protocol, operates the front-end multiplexer, and broadcasts the DVB standard code stream on the front end and sends it to the DVB terminal.

As shown in Figure 7, Figure 7 is a schematic diagram of the control flow of an authorization file in an implementation scenario of an embodiment of the present disclosure. The DVB terminal starts and tries to receive the authorization file. If a new authorization file is found, the data is received. After the authorization file is received, the authorization file is decrypted using the key and decryptor integrated in the terminal, and the decrypted authorization file is Perform verification. If the verification passes, update the existing authorization file in the terminal ROM. If the verification fails, determine whether the authorization file has expired. If the authorization expires, disable the core function of the DVB terminal to watch live content. If the authorization file has not expired, the DVB terminal will run with full functionality. If no new authorization file is found during the step of the DVB terminal trying to receive the authorization file, the step of determining whether the authorization file has expired will be performed. If it has expired, the DVB terminal live broadcast service will be disabled.

This disclosed embodiment uses PC tools to create a new authorization file, converts the new authorization file into a standard DVB protocol stream through a DVB stream converter, broadcasts it on the front end, and sends it to the DVB terminal. The DVB terminal uses the new authorization file according to the new authorization file. Update, if the authorization file authorization expires, the core function of watching live content of the DVB terminal is disabled. Through the embodiment of the present disclosure, the terminal manufacturer can control DVB authorization and disabling through the authorization file after the DVB terminal is sold, solving the problem The technical problem is that terminal manufacturers cannot perform authorization control on one-way DVB terminals.

Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by means of software plus the necessary general hardware platform. Of course, it can also be implemented by hardware, but in many cases the former is Better implementation. Based on this understanding, the technical solution of the present disclosure can be embodied in the form of a software product in essence or that contributes to related technologies. The computer software product is stored in a storage medium (such as ROM/RAM, magnetic disk, optical disk). ), includes several instructions to cause a terminal device (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods described in various embodiments of the present disclosure.

This embodiment also provides a first authorization control device suitable for one-way digital video broadcasting DVB terminals, which is used to implement the above embodiments and optional implementations. What has been described will not be described again. As used below, the term "module" may be a combination of software and/or hardware that implements a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, implementation in hardware, or a combination of software and hardware, is also possible and contemplated.

Figure 8 is a structural block diagram of a first authorization control device suitable for one-way digital video broadcasting DVB terminals according to an embodiment of the present disclosure. As shown in Figure 8, the first authorization control device includes: a receiving module 100 and a decryption module 200 , update module 300.

The receiving module 100 is configured to receive the encrypted second authorization file.

The decryption module 200 is configured to decrypt the second authorization file through a built-in key and decryptor. The key and decryptor are built into the read-only memory ROM of the one-way DVB terminal.

The update module 300 is configured to update the existing first authorization file of the one-way DVB terminal according to the decrypted second authorization file if the decryption is passed.

Optionally, the first authorization control device further includes: an acquisition module configured to obtain the current time and the validity time of the second authorization file; a determination module configured to determine whether the authorization has expired based on the current time and the validity time; and disable The module is configured to disable the live broadcast service of the DVB terminal if the authorization expires.

Optionally, the update module includes: a verification unit configured to extract the verification data of the second authorization file if the decryption is passed, and verify the decrypted second authorization file; and an update subunit configured to if If the verification passes, the existing first authorization file of the one-way DVB terminal is updated according to the second authorization file.

Figure 9 is a structural block diagram of a second authorization control device suitable for the control end of a one-way digital video broadcast DVB terminal according to an embodiment of the present disclosure. As shown in Figure 9, the second authorization control device includes: a configuration module 400 and an encryption module. Module 500.

The configuration module 400 is configured to configure the second authorization file.

The encryption module 500 is configured to calculate the verification data of the second authorization file, encrypt the second authorization file and the verification data, and obtain an encrypted second authorization file.

Optionally, the second authorization control device further includes: a sending module configured to convert the encrypted second authorization file into DVB protocol code stream data through a DVB code stream converter; and by operating the front-end multiplexer to the DVB The terminal sends code stream data.

Optionally, the second authorization control device further includes: a security detection module configured to determine whether the control terminal has connected the USB security key; if the control terminal has connected the USB security key, configure the second authorization file.

It should be noted that each of the above modules can be implemented through software or hardware. For the latter, it can be implemented in the following ways, but is not limited to this: the above modules are all located in the same processor; or the above modules can be implemented in any combination. The forms are located in different processors.

Embodiments of the present disclosure also provide an authorization control system, including a one-way digital video broadcast DVB terminal and a control terminal. The one-way DVB terminal includes the above first authorization control device; the control terminal includes the above second authorization control device.

Optionally, the embodiments of the authorization control system of the present disclosure are basically the same as the above method embodiments, and will not be described again here.

Embodiments of the present disclosure also provide an electronic device. The electronic device includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, any of the above items are implemented. The authorization control method described above.

Optionally, the above-mentioned electronic device may also include a transmission device and an input and output device. The transmission device is connected to the above-mentioned processor, and the input and output device is connected to the above-mentioned processor.

Optionally, in this embodiment, the above-mentioned processor may be configured to execute any of the above methods through a computer program.

Embodiments of the present disclosure also provide a storage medium. A computer program is stored on the storage medium. When the computer program is executed by a processor, any one of the above authorization control methods is implemented.

Optionally, the embodiments of the storage medium of the present disclosure are basically the same as the above-mentioned method embodiments, and will not be described again here.

Optionally, in this embodiment, the above storage medium may include but is not limited to: U disk, read-only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, referred to as RAM), Various media that can store computer programs, such as removable hard drives, magnetic disks, or optical disks.

The above serial numbers of the embodiments of the present disclosure are only for description and do not represent the advantages and disadvantages of the embodiments.

In the above-mentioned embodiments of the present disclosure, each embodiment is described with its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

In the several embodiments provided in this disclosure, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are only illustrative. For example, the division of units is only a logical function. It can be divided, and there may be other ways to divide it in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not implemented. On the other hand, the coupling or direct coupling or communication connection between each other shown or discussed may be through some interfaces, and the indirect coupling or communication connection of the units or modules may be in electrical or other forms.

A unit described as a separate component may or may not be physically separate. A component shown as a unit may or may not be a physical unit, that is, it may be located in one place, or it may be distributed to multiple network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in various embodiments of the present disclosure may be integrated into one processing unit, or each unit may exist physically alone, or two or more units may be integrated into one unit. The above integrated units can be implemented in the form of hardware or software functional units.

Integrated units may be stored in a computer-readable storage medium if they are implemented in the form of software functional units and sold or used as independent products. Based on this understanding, the technical solution of the present disclosure is essentially or contributes to the relevant technology, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, It includes several instructions to cause a computer device (which can be a personal computer, a server or a network device, etc.) to execute all or part of the steps of the methods described in various embodiments of the present disclosure. The aforementioned storage media include: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk and other media that can store program code. .

The embodiment of the present disclosure receives the encrypted second authorization file, decrypts the second authorization file according to the key and decryptor built in the read-only memory ROM of the one-way DVB terminal, and then decrypts the second authorization file according to the decrypted second authorization file. The existing first authorization file of the one-way DVB terminal is updated, which realizes the update of the DVB terminal authorization file and solves the technical problem in related technologies that the terminal manufacturer cannot perform authorization control on the one-way DVB terminal after the DVB terminal is sold.

The above are only optional implementations of the present disclosure. It should be noted that those of ordinary skill in the art can also make several improvements and modifications without departing from the principles of the present disclosure. These improvements and modifications It should also be regarded as the protection scope of this disclosure.

Claims

An authorization control method suitable for one-way digital video broadcasting DVB terminals, including:

Receive the encrypted second authorization file;

Decrypt the second authorization file through a built-in key and decryptor, wherein the key and decryptor are built in the read-only memory ROM of the one-way DVB terminal; and

In response to the decryption passing, the existing first authorization file of the one-way DVB terminal is updated according to the decrypted second authorization file.
The authorization control method according to claim 1, wherein, after updating the existing first authorization file of the one-way DVB terminal according to the decrypted second authorization file, the method further includes:

Obtain the current time and the validity time of the second authorization file;

Determine whether the authorization has expired based on the current time and the validity time; and

In response to the authorization expiration, the live broadcast service of the DVB terminal is disabled.
The authorization control method according to claim 1, wherein in response to the decryption passing, updating the first authorization file related to the one-way DVB terminal according to the decrypted second authorization file includes:

In response to the decryption passing, extract the verification data of the second authorization file, and verify the decrypted second authorization file; and

In response to the verification passing, the existing first authorization file of the one-way DVB terminal is updated according to the second authorization file.
An authorization control method suitable for the control end of a one-way digital video broadcast DVB terminal, including:

Configure the second authorization file; and

Calculate the verification data of the second authorization file, encrypt the second authorization file and the verification data, and obtain an encrypted second authorization file.
The authorization control method as claimed in claim 4, wherein after obtaining the encrypted second authorization file, the method further includes:

Convert the encrypted second authorization file into code stream data of the DVB protocol through a DVB code stream converter; and

The code stream data is sent to the DVB terminal by operating a front-end multiplexer.
The authorization control method according to claim 4, wherein before configuring the second authorization file, the method includes:

Determine whether the USB security key is connected to the console; and

In response to the USB security key being connected to the control terminal, the second authorization file is configured.
An authorization control device suitable for one-way digital video broadcasting DVB terminals, including:

a receiving module configured to receive the encrypted second authorization file;

A decryption module configured to decrypt the second authorization file through a built-in key and decryptor, wherein the key and decryptor are built in the read-only memory ROM of the one-way DVB terminal;

The update module is configured to, in response to the decryption passing, update the existing first authorization file of the one-way DVB terminal according to the decrypted second authorization file.
An authorization control device suitable for the control end of a one-way digital video broadcast DVB terminal, including:

a configuration module configured to configure the second authorization file; and

The encryption module is configured to calculate the verification data of the second authorization file, encrypt the second authorization file and the verification data, and obtain an encrypted second authorization file.
An authorization control system includes a one-way digital video broadcast DVB terminal and a control terminal, wherein,

The one-way DVB terminal includes the device as claimed in claim 8; and

The control end includes the device as claimed in claim 9.
An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the computer program implements claims 1 to 6 when executed by the processor The authorization control method described in any one of the above.
A storage medium, wherein a computer program is stored on the storage medium, and when the computer program is executed by a processor, the authorization control method according to any one of claims 1 to 6 is implemented.