KR20120014662A - Method and apparatus for providing contents of iptv to portable device and play the contents with the portable device - Google Patents

Abstract

PURPOSE: A method and apparatus for providing an IPTV(Internet Protocol TV) content to a portable device is provided to reproduce the IPTV content using a CAS(Conditional Access System) of an IPTV system. CONSTITUTION: An authentication processing unit(3010) determines the identity of a first authentication key which is decoded by a security software with a second authentication key which is received from an IPTV service provider. The authentication processing unit processes the authentication of a portable device. A CAS part discrambles a specific content which is requested by the authenticated portable device. A network interface part(3020) performs networking with the portable device and the IPTV service provider. The network interface part transmits the descrambled content to the portable device.

Description

TECHNICAL AND APPARATUS FOR PROVIDING CONTENTS OF IPTV TO PORTABLE DEVICE AND PLAY THE CONTENTS WITH THE PORTABLE DEVICE}

The present invention relates to a method and apparatus for providing content of an IPTV to a portable device and playing it on the portable device. More specifically, in a portable device, a series of methods and apparatus for playing content provided through a Conditional Access System (CAS) of IPTV.

Digital convergence is happening worldwide. One example is the Digital Living Network Alliance (DLNA). DNLA is aimed at bundling commercially available home appliances with home networks. That is, by applying the networking technology of a specific home appliance to other models of products produced by different manufacturers, within a range of networks, a plurality of home appliances can operate as if it is a single device.

In particular, the development of high definition multimedia interface (HDMI) and digital interactive interface for video & audio (DiiVA) enables high speed and high quality networking between A / V (audio / video) devices. That is, the AV content played back on one device can be played back on a plurality of devices connected to each other.

On the other hand, IPTV combines two-way communication through the Internet Protocol to broadcast, obtains Quality of Service (QoS), and provides almost unlimited amounts and types of content.

IPTV Service Providers try to create various kinds of content and create value through this unlimitedity.

In this situation, users who are provided with the IPTV service are not satisfied with the service provided by the fixed IPTV, and there is a desire to use the service of the IPTV even in a mobile situation if the networking is established. For example, you may want to use the services of IPTV while you are away from home in a home network or a room without IPTV.

However, in order for a user to use the content in an extended area, the content must be stored in a portable video device such as a PMP. In this case, there is a problem with copyright, causing a conflict between a service provider's interests and a user's desire. This can be caused.

In addition, content provided through CAS in IPTV is generally provided in a scrambled form, and in order to use this content, it is required to descramble using a CAS such as a smart card provided in the IPTV. However, it is difficult to commercialize such CAS in mobile devices in terms of content security and production cost.

SUMMARY OF THE INVENTION The present invention has been made to solve the above problems, and the technical problem to be achieved by the present invention is to enable the content provided in the IPTV in a portable device, without experiencing the above-described problems.

In order to solve the above technical problem, a method for providing content to a portable device in an Internet Protocol Television (IPTV) according to an embodiment of the present invention is to provide the content of the content provided in the IPTV from the portable device Receiving an authentication request for use, transmitting an IP address to download a security software for decrypting an encrypted first authentication key to the portable device that made the authentication request, and transmitting the security software through the IP address. Receiving a decrypted first authentication key from the downloaded portable device, receiving a second authentication key assigned to the portable device from an IPTV service provider, and receiving the second authentication key received from the IPTV service provider From the portable device which transmitted the 1st authentication key recognized as identity with an authentication key, Receiving the request that particular content and receiving a transmission request for the information content from the IPTV service provider, and performs descrambling by transmitting to the portable device.

In addition, the method for providing content to a portable device in an IPTV according to an embodiment of the present invention is characterized in that the security software is a module operable in a virtual machine.

In addition, the method for providing content from the IPTV to the portable device according to an embodiment of the present invention transmits information that authentication is successful to the portable device that transmits an authentication key that is recognized as the authentication key received from the IPTV service provider. It further comprises the step.

In addition, the method for providing content to the portable device in the IPTV according to an embodiment of the present invention is to send a request for transmission of the content list from the portable device that transmits an authentication key that is recognized the same as the authentication key received from the IPTV service provider Receiving and the step of transmitting the content request list to the portable device further comprising.

In addition, the method for providing content from the IPTV to the portable device according to an embodiment of the present invention includes receiving the identification information of the portable device transmitted to the IPTV service provider and the descrambled content And converting the portable device into a format reproducible by the portable device according to the performance of the portable device indicated by the identification information.

In order to solve the above technical problem, a method of playing the content of the IPTV in a portable device according to an embodiment of the present invention comprises the steps of transmitting an authentication request for using the content of the IPTV to the IPTV, Receiving an IP address from which the security software for decrypting the encrypted authentication key can be downloaded from the IPTV, downloading the security software through the IP address, and receiving its identification information from an IPTV service provider. Transmitting and receiving the encrypted authentication key from the IPTV service provider, decrypting the received encrypted authentication key with the security software, and transmitting the received authentication key to the IPTV. Transmitting a request and receiving the specific content descrambled in the IPTV. Include.

In addition, the method for playing the content of the IPTV in a portable device according to an embodiment of the present invention is characterized in that the security software is a module operable in a virtual machine.

In addition, the method for reproducing the content of the IPTV in the portable device according to an embodiment of the present invention further comprises the step of receiving information from the IPTV, the information that the authentication was successful with the transmitted authentication key content in the portable device IPTV How to play.

In addition, the method for playing the content of the IPTV in the portable device according to an embodiment of the present invention further comprises the step of transmitting a request for the content list to the IPTV transmitted the authentication key and receiving the content list from the IPTV Include.

In addition, the method for playing the content of the IPTV in the portable device according to an embodiment of the present invention, characterized in that the identification information includes information on the performance of the portable device, the descrambled specific content is the portable device It is characterized in that the conversion to a format that can be reproduced with the performance of.

An IPTV that provides content to a portable device according to an embodiment of the present invention for solving the above-mentioned problems has an IP address for downloading a security software for decrypting an encrypted first authentication key with a portable device. Process the authentication of the portable device by determining the identity of the first authentication key decrypted by the security software received from the portable device and the second authentication key received from the IPTV service provider. An authentication processing unit, a CAS (Conditional Access System) unit for descrambling specific content requested by the authenticated portable device, and a network for networking with the portable device and the IPTV service provider and transmitting the descrambled content to the portable device. It includes an interface unit.

A method and apparatus for providing content of an IPTV according to the present invention to a portable device and playing the content on the portable device have the following effects.

According to an embodiment of the present invention, there is an effect that the portable device can reproduce the content provided by the CAS of the IPTV without a problem such as licensing related to the copyright of the content.

According to another embodiment of the present invention, there is no need to include a CAS module in the portable device, thereby reducing the power consumption of the portable device.

According to another embodiment of the present invention, there is no need to include a CAS module in the portable device, thereby reducing the product development period and the production cost.

According to another embodiment of the present invention, the IPTV service provider and the IPTV service user do not have to provide or receive a separate smart card or the like for the portable device, so that the costs for providing the service and the fee for using the service There is an effect to save.

According to another embodiment of the present invention, if the service is provided through the IPTV and the networking space, the mobile device can provide the service provided by the IPTV through the portable device, so that the user-oriented service is possible. It is effective.

According to another embodiment of the present invention, another channel or program may be used through the portable device without interrupting the program viewing in the middle of watching the program through the IPTV.

1 is a diagram conceptually illustrating an IPTV broadcasting system according to an embodiment of the present invention.
2 is a diagram illustrating an IPTV broadcast receiver according to an embodiment of the present invention.
3 is a block diagram of a portable device according to one embodiment of the present invention.
4 is a diagram illustrating a detailed configuration of a portable device according to an embodiment of the present invention.
5 is a flowchart illustrating a method for providing content to a portable device in an IPTV according to an embodiment of the present invention.
6 is a flowchart illustrating a method of playing content of an IPTV in a portable device according to an embodiment of the present invention.
7 is a flowchart illustrating an authentication method between an IPTV and a portable device and a content providing method of an IPTV according to an embodiment of the present invention.
8 is a diagram illustrating information displayed by a portable device during an authentication process according to an embodiment of the present invention.
9 is a diagram illustrating a portable device displaying a streamable content list according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings and the contents described in the accompanying drawings, but the present invention is not limited or limited to the embodiments.

As used herein, terms used in the present invention are selected from general terms that are widely used in the present invention while taking into account the functions of the present invention, but these may vary depending on the intention or custom of a person skilled in the art or the emergence of new technologies. In addition, in certain cases, there is a term arbitrarily selected by the applicant, and in this case, the meaning will be described in the corresponding description of the invention. Therefore, it is intended that the terminology used herein should be interpreted based on the meaning of the term rather than on the name of the term, and on the entire contents of the specification.

IPTV's Conditional Access System (CAS) provides paid services by sending encrypted broadcast content to users over the Internet and authorizing only the user who paid for the use of the content to decrypt the password. Make it possible.

The main function of this CAS is the scrambling / descrambling function. The IPTV service provider scrambles and transmits the paid content, and at the same time, transmits a key for decrypting the scrambled signal to the user who paid the fee. The user can use normal content by descrambling the scrambled signal using the transmitted key. In this case, the IPTV service provider generally provides the key in the form of a smart card in order to solve a security problem that may occur during the transmission of the key.

1 is a diagram conceptually illustrating an IPTV broadcasting system according to an embodiment of the present invention.

The IPTV broadcasting system includes a program provider 1010, a service provider 1020, and a service consumer 1030. In this case, the program provider 1010 includes a platform provider (not shown).

IPTV allows terrestrial, satellite or cable broadcasts to be transmitted over the Internet for the user to view. The services provided through IPTV include various additional services such as providing movies, music, e-commerce and e-mail services desired by the user using the bidirectionality of the IPTV.

Program providers are defined as groups that provide content such as broadcast programs and additional services. TV stations, radio stations, video on demand (VoD) / audio on demand (AoD) services, music on demand (MoD) services, PF servers, electronic program guide (EPG) servers, An electronic content guide (ECG) server, a portal server, and the like may be an example of a program provider.

A TV station is a place for producing a broadcast program, and includes a conventional terrestrial broadcaster or a cable broadcaster, and produces program content that users can watch, converts it digitally, and transmits it to users.

Radio stations produce and transmit audio signals. In general, radio stations do not transmit video signals, but may transmit simple video signals.

Unlike TV stations or radio stations, VoD / AoD service transmits specific movies and music according to a user's request, and allows users to store and play data on them. That is, a user using the VoD / AoD service can consume a desired amount of content at a desired time through the received data.

MoD service is a service for downloading music desired by the user. MoD is similar to AoD, but has a feature that a record label or a record distributor can directly expand the service target.

The PF server may be serviced by a company that manages broadcasting information and location information provided by the program provider 1010. These companies service various additional information for the user such as broadcasting time, location information necessary for broadcasting through the PF server. The PF server is an element that must be provided for the convenience of user's content selection in an IPTV environment providing various contents. The service provided through the PF server displays the information processed by the service consumer 1030 on the screen.

The EPG server services the Electronic Program Guide (EPG). The EPG may inquire a broadcast program or include information about a broadcast program provided by each channel. The EPG server may allow a program for providing an EPG to be automatically installed and executed in the service consumer 1030.

The EPG server provides the service consumer 1030 with information about the real time broadcast programs and channels of all broadcast stations at once, unlike the PF server providing only the information about broadcast programs provided by a specific broadcast station. For example, the service consumer 1030 may receive the EPG provided by the EPG server to reserve and record the news of the CNN channel or to watch the animation of the Disney channel.

In particular, the EPG provided by the EPG server includes detailed information about each program. For example, it provides information about a story line, a category, and a rating of a drama, and may include information about a character or a place of a background.

The ECG server provides an electronic content guide (ECG). The ECG includes information about content that can be provided by the program provider 1010 and information about the location and access authority of the access server that can receive the content. In other words, ECG integrates and provides information such as EPG to services such as VoD / AoD and MoD. Thus, the user can be free from the burden of connecting to individual servers in order to watch specific content.

ECG provided by ECG server. Unlike the EPG, rather than providing information about a real-time broadcast channel, it provides the user with information about the broadcast channel stored in the server so that the user can download and watch at any time and place. For example, a user had to connect to a server with a complex address or a PF server to get information about each piece of content. However, a user can apply for ECG service by simply inputting a key to call ECG information on the remote controller, and can receive information about all contents provided by each server through a program automatically installed for ECG service. Through this information, the user can conveniently select specific content that he / she wants from various contents at once.

The portal server provides a web service operated by a broadcasting station. A program list provided by program providers 1010 such as a broadcasting station may be searched through a web service.

The portal server has functions such as user authentication, license agreement, and the like, so that a user may access to watch a desired program. In addition, unlike EPG and ECG, since the information of the content provided by the specific program provider 1010 is provided, more detailed search for the corresponding content may be possible.

The above-described program providers 1010 construct a network through the Internet to transmit content including a program and broadcast information to the service consumer 1030 in real time.

The program provider 1010 may also use an Internet (real-time) protocol such as real-time transport protocol (RTP), real-time streaming protocol (RTSP), resource reservation protocol (RSVP), or multi protocol label switching (MPLS). It is necessary to have a system that is networked with the service provider 1020 to transmit multimedia data without error.

For example, in an IPTV environment, the program provider 1010 may transmit a multimedia server according to a moving picture experts group-2 (MPEG-2) and / or an audio coding-3 (AC-3) scheme in real time. The service provider 1020 attaches the RTP / UDP (user datagram protocol) protocol with time information to transcode and match the caption or lip synch according to the IPTV environment. The system can be configured to pass through an IP network.

The service provider 1020 is responsible for stably transmitting multimedia and / or data received from the program provider 1010 to the service consumer 1030.

The service provider 1020 may provide an IPTV service using an existing cable network. In this case, the service providers 1020 need to change the equipment of the transmission network. That is, the service providers 1020 should be equipped with network equipment capable of transmitting data in real time, so that the transmission considering the service bandwidth should be made.

The service providers 1020 may reduce bandwidth by processing a large amount of multimedia data using a multicast service, which is a basic network service of IPTV. If the service providers 1020 do not have sufficient bandwidth, the MPEG-4 or MPEG-7 may be transcoded by encoding the multimedia data and / or broadcast data received from the optical cable network configuration or the program provider 1010. It can also be transmitted in the form of a transform.

The service provider 1020 may include a network management system manager (NMS manager), a dynamic host control protocol (DHCP) server, and a content delivery network (CDN) server.

The NMS manager manages a transmission network that the service provider 1020 can transmit to each service consumer 1030 and an IPTV broadcast receiver of the service consumer 1030. For example, the service provider 1020 may recognize that a problem occurs in the transmission network through the NMS manager, so that the service consumer 1030 may not receive a normal broadcast. In this case, emergency means to handle the problem Must be equipped with.

The NMS manager described above is widely used as a standardized means for smoothly controlling and managing machines in a remote transport layer. That is, the service provider 1020 may use the NMS manager to determine how much traffic is generated for which broadcast, and in which region, the bandwidth is insufficient.

In addition, the service provider 1020 may provide a service of the NMS manager to the program provider 1010 so that a group may be created and managed during multicast. This is because the program provider 1010 must also be able to create more multicast groups in certain cases.

The DHCP server automatically assigns an IP to the IPTV broadcast receiver of the service consumer 1030 and informs the address of the CDN server. DHCP servers are also used as a means of assigning IP to PCs in general networks. That is, the service provider 1020 transmits an accessible address to the IPTV broadcast receiver that is allowed to use through a DHCP server so that the user can register when the user first connects. The service provider 1020 may provide an internet protocol version 4 (IPv4) to an IPTV broadcast receiver in an IPTV environment, but may also provide an internet protocol version 6 (IPv6). Thus, an IPTV receiver providing IPv4 does not mean that it cannot be used.

The CDN server provides CDN information along with IP when the IPTV broadcasting receiver is powered on for the first time. The CDN information includes registration or authentication of a user of an IPTV broadcasting company and the above-described PF information. Therefore, if the IPTV broadcast receiver does not receive CDN information from the service provider 1020, broadcast reception will be limited.

The service consumer 1030 includes various types of IPTV broadcast receivers. If you have a regular TV, you can rent IPTV STB (settop box) to enjoy the IPTV broadcasting service at low cost. In addition, you can pay the service provider 1020 at a lower price and additional service costs, and also with the IP phone. You can apply and use it.

2 is a diagram illustrating an IPTV broadcast receiver according to an embodiment of the present invention.

The IPTV broadcasting receiver of FIG. 2 includes a network interface 2010, an IP manager 2020, a conditional access system (CAD) / digital rights managment (DRM) unit 2030, and a service delivery manager. service delivery manager 2040, demultiplexer 2050, audio / video decoder 2060, display apparatus 2070, application controller 2080 ), A channel manager 2090, a service information decoder 2100, a service discovery manager 2110, a service control manager 2120, a system manager the system manager 2130, the storage apparatus 2140, the storage medium controller 2150, the storage medium 2160, the broadcast signal receiver 2170, the authentication processor 2180, and the converter 2190. Include.

The network interface unit 2010 functions to connect a receiver with an internet network for a broadcast service, and may receive or transmit a packet through the connected network.

The IP manager 2020 is involved in packet transmission from a source to a destination for a packet received or a packet transmitted through a connected network. That is, the IP manager 2020 may classify the packet to correspond to an appropriate protocol. In addition, the IP manager 2020 may request transmission of an application using at least one of an IP address and a port number.

The CAS / DRM unit 2030 is in charge of receiving broadcast service and functions related to digital rights management. That is, the CAS / DRM unit 2030 receives a packet received in connection with a broadcast service from the network connected through the network interface unit 2010 through the IP manager 2020 to restrict the reception of the packet or to control digital rights management. If there are restrictions associated with them, they can be solved. That is, the CAS / DRM unit 2030 is responsible for controlling by accessing or redistributing the received packet.

The service delivery manager 2040 is responsible for handling the real time streaming data. In this case, RTP / RTCP may be used for an MPEG-2 transport stream. In other words, MPEG-2 packets can be encapsulated in RTP. Accordingly, the service delivery manager 2040 parses the RTP packets and transmits the MPEG-2 packet encapsulated as a result of the parsing to the demultiplexer 2050. Alternatively, the service delivery manager 2040 may transmit a feedback on the quality of network reception using RTCP. At this time, MPEG-2 transport packets can be directly transmitted to UDP without RTP.

The demultiplexer 2050 demultiplexes audio, video, and service information data from received transport stream packets. In one embodiment, the demultiplexer 2050 demultiplexes Program Specific Information (PSI) tables under the control of the service information decoder 2100 and decodes the audio / video transport packets under the control of the channel manager 2090. Will multiplex. Also, the demultiplexer 2050 creates a section of the demultiplexed PSI tables and transmits the section to the service information decoder 2100.

The audio / video decoder 2060 receives and processes the demultiplexed audio / video packet from the demultiplexer 2050.

The display 2070 receives and displays an audio / video signal processed by the audio / video decoder 2060.

The application controller 2080 supports a graphical user interface (GUI) on the display for the user, and receives the user's input through an external input device such as a remote controller or a front panel, so that the user's input is In the case of channel selection, the input is transmitted to the channel manager 2090. In addition, the application controller 2080 may control key states of the entire receiver system or store configuration data in the storage unit 2140.

The channel manager 2090 creates a channel map or controls the service discovery manager 2110. In addition, the channel manager 2090 requests channel information from the service information decoder 2100 or resets the service information decoder 2100 for channel information. The channel manager 2090 sets a PID (packet identifier) in the demultiplexer 2050 to receive the audio / video packet.

The service information decoder 2100 is a module for controlling service information such as PSI / PSIP / DVB-SI and performs a slave operation by the control of the channel manager 2090. The service information decoder 2100 sets a corresponding PID to the demultiplexer 2050 to demultiplex service information such as the PSI / PSIP / DVB-SI. The service information decoder 2100 receives and processes a section for each service information created by the demultiplexer according to the above setting. In addition, the service information decoder 2100 receives service information from the service delivery manager 2040 and creates a service information database for a broadcast service.

The service discovery manager 2110 finds and enables IPTV services through an IPTV network capable of bidirectional services. The service discovery manager 2110 provides all information for the selected service.

The service control manager 2120 is in charge of selecting and controlling services. For example, the service control manager 2120 selects a live broadcast service using IGMP or the RTSP protocol, or selects VOD content using the RTSP protocol. In this case, the RTSP protocol is used to control the transmission of television and audio that are directly transmitted or broadcast. In addition, the RTSP protocol is used for a continuous transmission control procedure (TCP) connection or to allow trick mode control for real-time broadcasting media streaming.

The system manager 2130 controls a boot flow according to power on / off of the receiver system, and writes or stores a ROM image including the downloaded software image in the storage unit 2140.

The storage unit 2140 stores setup data for the system. As the storage unit, a nonvolatile memory (NVRAM) or a flash memory may be used.

The storage medium 2160 temporarily stores a signal transmitted from the demultiplexer 2050 or the audio / video decoder 2060 and transmits the signal to the demultiplexer 2050 or the audio / video decoder 2060. do. In this case, the storage medium 2160 writes data from the received signal under the control of the storage medium controller 2150, stores the signal, and provides the demultiplexer 2050.

The broadcast signal receiver 2170 receives a broadcast signal by tuning a channel, demodulates the received broadcast signal, and outputs the demodulated signal to the demultiplexer 2050. The broadcast signal receiver 2170 may further include a tuner and a demodulator according to an embodiment. In addition, the broadcast signal receiver 2170 may be included in the network interface 2010. In the present invention, the network interface unit 2010 transmits and receives an IPTV packet by an IP address or a port number, and the broadcast signal receiving unit 2170 is a broadcast signal including broadcast data that is not an IPTV packet type. According to an embodiment of the present invention. In an embodiment of the present invention, the broadcast signal of the ACAP standard may be received through the broadcast signal receiver 2170.

The authentication processor 2180 performs an overall procedure for authenticating the portable device to receive the content from the IPTV broadcast receiver. In response to the authentication request of the portable device, an address for downloading the security software is transmitted to the portable device. In this case, when the IPTV receives the request of the portable device and delivers the request to the service provider, the above address may be provided by the service provider or may be an address determined to download security software for a specific IPTV. When the portable device transmits the authentication key decrypted using the security software, the authentication processing unit 2180 determines whether authentication is possible by comparing with the authentication key received from the service provider.

The authentication processor 2180 may always authenticate before transmitting a packet from the IPTV to the portable device. Alternatively, authentication may be repeated at regular time intervals. At this time, each time authentication is performed, a request is made to the service provider to transmit a new authentication key, and the service provider transmits the authentication key to the portable device and the IPTV according to the request, and compares the authentication keys with each other to perform authentication. can do. This behavior may vary depending on the degree of security to be maintained.

The converting unit 2190 is responsible for converting the portable device into a format reproducible after the authentication is successful and before transmitting the content requested by the portable device. For example, the portable device may recompress the video / audio compression method in a decodable manner, adjust the screen according to the resolution of the portable device, and adjust the audio quality according to the audio environment of the portable device. In this case, the capacity of the portable device may be transmitted from the portable device when receiving the authentication request of the portable device, or if the portable device provides its identification information to the service provider to download the security software, It can be included and delivered to IPTV.

In another embodiment, the conversion unit 2190 inserts information related to authentication while performing conversion to transmit content, and when data is incorrectly transferred to another device or intercepted in the transmission process, Processing may be performed to prevent the use of the content in an unauthorized device. For example, the device may process content to be transmitted only by a device corresponding to identification information of the portable device provided by the service provider.

 That is, the authentication processor 2180 and the converter 2190 enable stable and efficient content reproduction in the portable device.

3 is a block diagram of a portable device according to one embodiment of the present invention.

As illustrated in FIG. 3, the portable device according to the present invention includes an authentication processor 3010, a network interface unit 3020, a broadcast signal processor 3030, a display unit 3040, a memory 3050, and a system manager 3060. ).

The authentication processing unit 3010 is involved in a series of operations for receiving and playing content from the IPTV. The authentication processing unit 3010 performs an authentication request to the IPTV when the user inputs content selection of the IPTV. In response to the authentication request, it receives an IP address from which the security software can be downloaded and accesses the address. In this case, the IP address transmitted by the IPTV may be a server address of the service provider. Controls to download security software from the IP address and save it to storage or install it immediately. In this case, since the security software downloaded and installed should be usable regardless of the platform of the portable device, it is an embodiment of the present invention that the module operates in a virtual machine.

The authentication processing unit 3010 controls the registration for authentication by providing identification information of the portable device to the service provider. When registration of the portable device is completed, the service provider controls to transmit the authentication key to the portable device and the IPTV. At this time, since the authentication key transmitted to the portable device is encrypted, the authentication processing unit 3010 controls to decrypt using the security software. The IPTV receives the decrypted authentication key transmitted from the portable device and the same authentication key as the authentication key assigned to the portable device from the service provider, and when the two authentication keys are recognized, the authentication is completed and the authentication processing unit 3010. To tell.

That is, as described above, the authentication processing unit 3010 controls to register unique information of the portable device in the service provider so as to avoid confusion with other devices in the authentication process with the IPTV.

The authentication operation of the authentication processing unit 3010 may be performed whenever the portable device requests the content of the IPTV, and may be periodically performed. That is, in order to maintain security, the authentication key must be periodically updated and the authentication procedure must be periodically processed accordingly.

The network interface unit 3020 functions to connect a receiver to an internet network for a broadcast service, and may receive or transmit a packet through the connected network. It is also possible to receive broadcast signals directly. The network interface unit 3020 also plays a role of transmitting / receiving data generated in a process of processing authentication in the authentication processing unit 3010.

The broadcast signal processor 3030 decodes the broadcast signal received through the network interface unit 3020 and performs additional processing so that a user can watch a broadcast program.

The display unit 3040 serves to display the broadcast signal processed by the broadcast processor 3030.

The memory 3050 is an information storage medium for temporarily storing a program or storing an authentication key. For example, it is used as a space for temporarily storing an application used by a portable device or installing an application.

The system manager 3060 is responsible for overall control of the portable device. That is, a series of operations are controlled by the system manager 3060 from the moment when the portable device is turned on to the moment when the portable device is turned off.

4 is a diagram illustrating a detailed configuration of a portable device according to an embodiment of the present invention.

As illustrated in FIG. 4, the portable device includes a network interface unit 4010, an authentication processor 4020, a broadcast signal processor 4030, an IP manager 4040, a demultiplexer 4050, and an audio / video decoder. (audio / video decoder) 4060, display apparatus 4070, application controller 4080, channel manager 4090, service information decoder 4100 ), A service discovery manager 4110, a service control manager 4120, a system manager 4130, a storage apparatus 4140, a storage medium controller 4150, a storage medium 4160, and a broadcast signal receiver 4170.

The network interface unit 4010 functions to connect a receiver to an internet network for a broadcast service, and may receive or transmit a packet through the connected network. In addition, the network interface unit 4010 transmits / receives data generated in the authentication process of the authentication processing unit 4020.

The authentication processor 4020 is involved in a series of operations for receiving and playing content from the IPTV. When there is an input of selecting content of the IPTV of the user, the authentication processing unit 4020 requests the authentication of the portable device to the IPTV, and receives an IP address for downloading the security software in response to the request to access the corresponding address. To control. At this time, the IP address transmitted by the IPTV is a server address of a service provider or a separate server address for providing security software. Controls to download security software from the IP address and save it to storage or install it immediately. In this case, since the security software downloaded and installed should be usable regardless of the platform of the portable device, it is an embodiment of the present invention that the module operates in a virtual machine.

The authentication processor 4020 controls the registration for authentication by providing identification information of the portable device to the service provider. When registration of the portable device is completed, the service provider controls to transmit the authentication key to the portable device and the IPTV. At this time, since the authentication key transmitted to the portable device is encrypted, the authentication processing unit 4020 controls to decrypt using the security software. The IPTV receives the decrypted authentication key transmitted from the portable device and the same authentication key as the authentication key assigned to the portable device from the service provider. To tell.

That is, as described above, the authentication processing unit 4020 controls to register unique information of the portable device in the service provider so as to prevent confusion with other devices in the authentication process with the IPTV.

The authentication operation of the authentication processor 4020 may be performed whenever the portable device requests the content of the IPTV, and may be periodically performed. That is, in order to maintain security, the authentication key must be periodically updated and the authentication procedure must be periodically processed accordingly.

The broadcast signal processor 4030 may include an IP manager 4040, a demultiplexer 4050, an audio / video decoder 4060, an application controller 4080, a channel manager 4090, and service information. A service information decoder 4100, a service discovery manager 4110, a service control manager 4120, a storage medium controller 4150, and a storage medium 4160. That is, the broadcast signal processor 4030 is in charge of signal processing from receiving a broadcast signal to delivering content to a user.

The IP manager 4040 is involved in packet transmission from a source to a destination for a packet received or a packet transmitted through a connected network. That is, the IP manager 4040 may classify the packet to correspond to an appropriate protocol. In addition, the IP manager 4040 may request to transmit an application using at least one of an IP address and a port number.

The demultiplexer 4050 demultiplexes audio, video, and service information data from received transport stream packets. As an embodiment, the demultiplexer 4050 demultiplexes Program Specific Information (PSI) tables under the control of the service information decoder 4100, and decodes the audio / video transport packets under the control of the channel manager 4090. Will multiplex. Also, the demultiplexer 4050 creates a section of the demultiplexed PSI tables and transmits the section to the service information decoder 4100.

The audio / video decoder 4060 receives and processes the demultiplexed audio / video packet from the demultiplexer 4050.

The display unit 4070 receives and displays an audio / video signal processed by the audio / video decoder 2060.

The application controller 4080 supports a graphical user interface (GUI) on the display for the user, and receives the user's input through an external input device such as a remote controller or a front panel, so that the user's input is In the case of channel selection, the input is transmitted to the channel manager 4090. In addition, the application controller 4080 may control key states of the entire receiver system or store configuration data in the storage unit 4140.

The channel manager 4090 creates a channel map or controls the service discovery manager 4110. In addition, the channel manager 4090 requests the channel information from the service information decoder 4100 or resets the service information decoder 4100 for channel information. The channel manager 4090 sets a corresponding PID (packet identifier) to the demultiplexer 4050 to receive the audio / video packet.

The service information decoder 4100 is a module for controlling service information such as PSI / PSIP / DVB-SI, and performs a slave operation under the control of the channel manager 4090. The service information decoder 4100 sets a corresponding PID to the demultiplexer 4050 so as to demultiplex service information such as the PSI / PSIP / DVB-SI. The service information decoder 4100 receives and processes a section for each service information created by the demultiplexer according to the setting.

The service discovery manager 4110 finds and enables IPTV services through an IPTV network capable of bidirectional services. The service discovery manager 4110 provides all information for the selected service.

The service control manager 4120 is responsible for selecting and controlling services. For example, the service control manager 4120 selects a live broadcast service using IGMP (Internet group management protocol) or RTSP protocol, or selects VOD content using RTSP protocol. In this case, the RTSP protocol is used to control the transmission of television and audio that are directly transmitted or broadcast. In addition, the RTSP protocol is used for a continuous transmission control procedure (TCP) connection or to allow trick mode control for real-time broadcasting media streaming.

The system manager 4130 controls a boot flow according to power on / off of the receiver system, and writes or stores a ROM image including the downloaded software image in the storage unit 4140.

The storage unit 4140 stores setup data for the system. In addition, the authentication key received during the authentication process is stored. The storage unit may be a nonvolatile RAM (NVRAM) or flash memory.

The storage medium 4160 temporarily stores a signal transmitted from the demultiplexer 4050 or the audio / video decoder 4060 and transmits the signal to the demultiplexer 4050 or the audio / video decoder 4060. do. In this case, the storage medium 4160 writes data from the received signal under the control of the storage medium controller 4150, stores the signal, and provides the demultiplexer 4050.

The broadcast signal receiver 4170 receives a broadcast signal by tuning a channel, demodulates the received broadcast signal, and outputs the demodulated signal to the demultiplexer 4050. The broadcast signal receiver 4170 may further include a tuner and a demodulator according to an embodiment. In addition, the broadcast signal receiving unit 4170 may be included in the network interface unit 4010. In the present invention, the network interface 4010 transmits and receives an IPTV packet by an IP address or a port number, and the broadcast signal receiver 4170 is a broadcast signal including broadcast data rather than an IPTV packet type, and tunes a channel to broadcast signals. According to an embodiment of the present invention. In an embodiment of the present invention, the broadcast signal of the ACAP standard may be received through the broadcast signal receiver 2170.

The portable device according to the present invention has the effect of being able to receive content provided by CAS from IPTV and provide it to a user without having a CAS. In addition, since the portable device does not have a separate CAS, power consumption and cost in the production process can be reduced. In addition, there is no cost for adding smart cards, which can reduce the burden on service providers and users.

5 is a flowchart illustrating a method for providing content to a portable device in an IPTV according to an embodiment of the present invention.

The IPTV receives an authentication request of the portable device (s5010). In this case, it may be determined whether authentication of the portable device which has requested authentication has already been performed. If there is a record that has already been authenticated to the portable device requesting authentication, the portable device is notified that the authentication is successful without proceeding to the subsequent authentication procedure.

If there is no authentication record for the portable device requesting authentication, the IPTV informs the portable terminal of the IP address from which the security software can be downloaded (s5020). In this case, the provided IP address may be a server address of the service provider. In this case, the security software can be downloaded and the portable device can be registered at the service provider at once.

IPTV, the portable device registers itself with the service provider and receives the authentication key received from the portable device (s5030). At this time, the authentication key transmitted by the portable device is that the IPTV itself is also received from the service provider. However, the authentication key provided to the portable device is encrypted and decrypted using security software in the portable device and transmitted to the IPTV.

IPTV checks the identity by comparing the authentication key received from the portable device and the authentication key received from the service provider (s5040). That is, the portable device requesting authentication is determined to be a portable device that is allowed to provide content from a service provider. At this time, if the identity between the authentication keys is not recognized, the procedure is terminated without completing the authentication.

When the sameness between the received authentication keys is recognized, the IPTV notifies the portable device of the successful authentication and receives a request for transmission of specific content from the portable device (S5050).

The IPTV receives the content request from the service provider, performs descrambling using its CAS, and then transmits the content to the portable device (s5060). In this case, when unscrambled content (for example, an advertisement, etc.) is received, the content may be transferred directly to the portable device without going through the descrambling process.

In the process of delivering the content to the portable device, the IPTV may convert the content into a form suitable for use in the portable device. That is, the format of the content received from the service provider may be converted to be optimally reproduced when the content is reproduced in the portable device in consideration of the resolution, decoding capability, etc. of the portable device. In this case, the information on the performance of the portable device is obtained from identification information of the portable device transmitted in the process in which the portable device is registered with the service provider.

In the above conversion process, the user of the portable device can not only use the content in an optimal state, but also reduce the amount of data that must be transmitted from the IPTV to the portable device, thereby improving the transmission efficiency between the IPTV and the portable device. It can be effective.

6 is a flowchart illustrating a method of playing content of an IPTV in a portable device according to an embodiment of the present invention.

The portable device requests authentication for using the content with the IPTV in order to receive the content of the IPTV (s6010). At this time, the portable device having an already authenticated record may transmit an inquiry about the validity of the authentication key that it currently has to IPTV.

If there is no authentication record for the portable device in the IPTV, the portable device receives an IP address for downloading security software from the IPTV (s6020). The security software can operate in a virtual machine in the portable device, allowing the portable device to run the security software in the portable device regardless of which platform the portable device uses.

The portable device registers itself with the service provider by transmitting its identification information to the service provider and receives an authentication key from the service provider (s6030). At this time, the received authentication key is encrypted and cannot be used by another device even if it is leaked in the transmission process.

The portable device decrypts the encrypted authentication key using the downloaded security software, stores it in its memory, and transmits the decrypted authentication key to the IPTV (s6040).

When the portable device completes the authentication using the transmitted authentication key, the portable device requests the provision of content to the verified IPTV (s6050). In this case, prior to requesting the provision of the content to the IPTV, the portable device may receive a content list provided from the IPTV so that the user can select from the list of the desired content.

The portable device receives the content requesting the transmission from the IPTV (s6060). In this case, the received content is descrambled in IPTV, and there is no need to go through a separate descrambling process in the portable device.

According to one embodiment of the present invention, the portable device can play content provided by CAS in IPTV without having a CAS. In addition, there is no need to go through the descrambling process through CAS, thereby saving the resources used for descrambling. Therefore, the production cost of the portable device can be lowered, and the period for product development can be shortened.

7 is a flowchart illustrating an authentication method between an IPTV and a portable device and a content providing method of an IPTV according to an embodiment of the present invention.

The portable device attempts to connect to receive content by networking with an IPTV (S7010). In this case, according to an embodiment of the present invention, the portable device and the IPTV exist in the same IP network by using a universal plug and play (uPnP) protocol.

If the portable device already has an authentication key, it transmits it to the IPTV. If the authentication key transmitted by the portable device is already registered in the authentication key list, the IPTV completes authentication and informs that the connection to the portable device is successful (s7020).

However, if the authentication key transmitted by the portable device is not registered in the authentication key list of the IPTV or the portable device does not transmit the authentication key, the IPTV transmits an IP address to the portable device to download the security software. (S7030).

The portable device downloads and installs the security software from the address received from the IPTV (s7040). The downloaded security software is a module operable in the virtual machine to run on the portable device regardless of the platform of the portable device. The security software also has an encryption / decryption function for the authentication key.

The portable device accesses the authentication server of the service provider and transmits its identification information, and registers it with the server of the service provider. The service provider sends the encrypted authentication key to the portable device and the IPTV.

The portable device decrypts the authentication key received from the service provider using security software, stores the authentication key, and transmits the authentication key to IPTV to request authentication (s7050).

If the information of the authentication key received from the portable device matches the information of the authentication key received from the service provider, the IPTV completes authentication and registers the authentication key in the authentication key list (s7060).

When the authentication is successfully completed, the IPTV transmits a message indicating that the connection for content transmission is successful to the portable device (s7070).

After the portable device is connected, the portable device may request a list of contents that can be provided from the IPTV (s7080).

When the portable device requests the content list, the IPTV transmits the content list to the portable device (s7090). In this case, the transmitted content list may be provided from a service provider.

When the portable device selects specific content and requests streaming (s7100), the IPTV accesses the server of the service provider and receives the content to descramble (s7110). At this time, the IPTV may perform an operation of converting the content received from the service provider to an optimal state for playing on the portable device. The operation of converting content refers to converting the content into a format that matches the format after confirming the performance of the portable device through identification information of the portable device.

The IPTV starts streaming of the descrambled content to the portable device (s7120). The portable device processes the signal to be streamed to provide content to the user.

8 is a diagram illustrating information displayed by a portable device during an authentication process according to an embodiment of the present invention.

When the user inputs a key for using the content provided by the IPTV in the portable device, the user is asked whether to perform authentication for receiving the content of the IPTV. The reason why a procedure for inquiring whether to perform such authentication is necessary is that, depending on the marketing method of the service provider, there may be a case where a certain charge is added to stream content provided from the portable device to the IPTV.

When the user requests authentication, the user attempts authentication. When the user confirms that there is no authentication key, the user inquires whether to download the security software and perform an in-tool for processing the authentication key.

After installing the security software, the authentication procedure for connecting the authentication key to the IPTV from the service provider is performed. This process can take a certain time, it can provide the user with information about the time required.

If authentication is successful, the user is informed that authentication is complete. Thereafter, the user may stream and watch the content of the IPTV on the portable device.

9 is a diagram illustrating a portable device displaying a streamable content list according to an embodiment of the present invention.

The content that can be streamed from the IPTV to the portable device includes a program of a general broadcast channel, a program of a paid channel, and content stored in an IPTV.

The program of the general broadcast channel may be provided without being scrambled from the service provider. In this case, content may be provided to the portable device without going through the descrambling process in the IPTV. For example, in the case of a channel including a commercial or a shopping channel, the more viewers, the better the service provider. Therefore, it is advantageous for the service provider to provide scrambled content.

In addition, the VOD already stored in the IPTV can be directly streamed from the IPTV to the portable device. That is, since IPTV has already paid for the VOD, there is no need to perform an additional procedure with the service provider in order to play it on the portable device.

The content list may be updated periodically. That is, since the content provided by the service provider is changed from time to time, the content list should be changed from time to time. The update of the content list may be executed at the request of the user or whenever the portable device connects to the IPTV.

As described in detail above, according to the embodiments of the present invention, there is an effect that the portable device can reproduce the content provided by the CAS of the IPTV without a problem such as licensing related to the copyright of the content.

In addition, there is no need to include a CAS module in the portable device, thereby reducing the power consumption of the portable device.

In addition, there is no need to provide a CAS module in the portable device, thereby reducing the product development period and production cost.

Another effect is that IPTV service providers and IPTV service users do not have to provide or receive a separate smart card or CAS for the portable device, which saves all costs and costs for using the service. It can be effective.

If the service is provided through the IPTV and the space where the networking is performed, the service provided by the IPTV can be provided through the portable device even in a mobile environment, thereby enabling the user-centered service.

In the middle of watching a program through IPTV, another channel or program may be used through the portable device without interrupting the program viewing.

As described above, although the present invention has been described with reference to the limited embodiments and the drawings, the present invention is not limited to the above embodiments, and those skilled in the art to which the present invention pertains various modifications and variations from such descriptions. This is possible. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined not only by the claims below but also by the equivalents of the claims.

Claims (15)

In the method of providing content from the Internet Protocol Television (IPTV) to a portable device,
Receiving, from the portable device, an authentication request for use of content provided in IPTV;
Transmitting an IP address from which the security software for decrypting the encrypted first authentication key can be downloaded to the portable device which has made the authentication request;
Receiving a decrypted first authentication key from the portable device that has downloaded the security software through the IP address, and receiving a second authentication key assigned to the portable device from an IPTV service provider;
Receiving a request for transmission of specific content from a portable device that transmits a first authentication key that is recognized as the same as the second authentication key received from the IPTV service provider;
Receiving the requested specific content from an IPTV service provider, performing descrambling, and transmitting the decoded content to the portable device;
Providing content to a portable device in IPTV comprising a. The method of claim 1,
And said security software is a module operable in a virtual machine. The method of claim 1,
Transmitting information indicating that authentication is successful to a portable device that has transmitted an authentication key that is recognized to be identical to the authentication key received from the IPTV service provider;
The method for providing content to a portable device in the IPTV further comprising. The method of claim 1,
Receiving a request for transmission of a content list from a portable device that transmits an authentication key which is recognized to be identical to the authentication key received from the IPTV service provider; And
Transmitting the content request list to the portable device;
The method for providing content to a portable device in the IPTV further comprising. The method of claim 1,
Receiving identification information of the portable device transmitted by the portable device to the IPTV service provider; And
Converting the descrambled content into a format reproducible by the portable device according to the performance of the portable device indicated by the identification information;
The method for providing content to a portable device in the IPTV further comprising. In the method of playing the content (Content) of the IPTV in a portable device,
Transmitting an authentication request for using the content of the IPTV to the IPTV;
Receiving, from the IPTV, an IP address from which the security software for decrypting an encrypted authentication key can be downloaded;
Downloading the security software through the IP address, transmitting its identification information to an IPTV service provider, and receiving an encrypted authentication key from the IPTV service provider;
Decrypting the received encrypted authentication key with the security software and transmitting it to the IPTV;
Transmitting a request for specific content to the IPTV receiving the authentication key;
Receiving the specific content descrambled in the IPTV;
How to play the content of the IPTV in a portable device comprising a. The method according to claim 6,
The security software is a module operable in a virtual machine. The method according to claim 6,
Receiving, from the IPTV, information that authentication is successful with the transmitted authentication key;
The method of playing the content of the IPTV in the portable device further comprising. The method according to claim 6,
Transmitting a request for a content list to an IPTV transmitting the authentication key; And
Receiving a content list from the IPTV;
The method of playing the content of the IPTV in the portable device further comprising. The method according to claim 6,
The identification information is characterized in that it includes information on the performance of the portable device,
And the descrambled specific content is converted into a format that can be reproduced at the performance of the portable device. The first authentication key decrypted by the security software and the IPTV, which are controlled to transmit an IP address for downloading the security software for decrypting the encrypted first authentication key with the portable device, and received from the portable device. An authentication processor configured to process authentication of the portable device by determining an identity of a second authentication key received from a service provider;
A CAS (Conditional Access System) unit for descrambling specific content requested by the authenticated portable device;
A network interface unit for networking with the portable device and the IPTV service provider and transmitting the descrambled content to the portable device;
IPTV providing content to a portable device comprising a. The method of claim 11,
The authentication processing unit,
And generating and transmitting information indicating that authentication is successful to the portable device that has transmitted the authentication key that is recognized as the same as the authentication key received from the IPTV service provider. The method of claim 11,
The authentication processing unit,
And providing a content list to the portable device, wherein the content list is transmitted to the portable device that has transmitted the authentication key that is recognized as the authentication key received from the IPTV service provider. The method of claim 11,
A converting unit converting the descrambled content into a format reproducible by the portable device according to the performance of the portable device;
IPTV providing content to a portable device further comprising. The method of claim 11,
The security software is an IPTV for providing content to a portable device, characterized in that the module operable in a virtual machine.

Images