KR100670786B1 - Apparatus and method for selectively providing IP broadcast service using subscriber profile - Google Patents

Abstract

An apparatus and method for selectively providing an IP broadcasting service using a subscriber profile according to the present invention are provided in a method of providing an IPTV service in a network consisting of a router, a switch, and a subscriber station, wherein the switch requests an authorization request from the subscriber station. Receiving a broadcast channel request / end request and forwarding an authorization request to the router; Determining, by the router that has received the approval request, a transmission of subscriber information to the switch if positive; Determining whether to allow a broadcast channel requested by the subscriber station based on the subscriber information after storing the subscriber information; Receiving, by the router, a channel request message according to the permission determination, transmitting broadcast data corresponding to the broadcast channel to the switch; And determining, by the switch, whether to deliver broadcast channel information to the subscriber terminal based on the subscriber information, wherein the switch uses only subscriber-contracted channels using subscriber information in the subscriber profile. By transmitting to the subscriber station, it is possible to increase the security level for the broadcast data by filtering the broadcast data for each subscriber.

Description

Apparatus for providing selective IPTV service using user profile and method etc.

1 is a diagram illustrating a configuration including a conventional broadcast server and an authentication server for providing an IP broadcast service.

2 is a view showing the configuration of a router and a switch according to the present invention.

3 is a flowchart illustrating a process of IP broadcast filtering in a switch according to the present invention.

4 is an embodiment of a subscriber profile according to the present invention.

The present invention relates to an apparatus and method for selectively providing an IP broadcasting service using a subscriber profile. More particularly, the present invention relates to an IP broadcasting in a subscriber network environment in which a broadcasting server, a router, a switch, and an IPTV terminal are connected. The present invention relates to an apparatus and method for providing IP broadcast data for each subscriber by providing a profile manager for each subscriber in a switch device, which is a layer 2 device.

A conventional method will be described with reference to FIG. 1. 1 is a diagram illustrating a configuration including a conventional broadcast server and an authentication server for providing an IP broadcast service.

Referring to FIG. 1, the subscriber network includes a router 110, which is a network side device, and a plurality of switches 120, which are subscriber side devices. The router 110 is connected to a broadcast service node 140, an on-demand video service node (not shown), and an internet service node (not shown) by STM-1 line. In addition, the router 110 is connected to the network management system 160 for managing one or more routers. The network management system 160 investigates and manages the failure and performance information of the router and the switch connected to the router, and serves to provide the administrator with related information of the router and the switch of the subscriber network.

The switch 120 is connected to the router 110 by N: 1, is connected through a 1G Ethernet link, and is connected to a subscriber terminal device such as an IPTV terminal, a home gateway server, or a PC through a 10 / 100M Ethernet interface.

Conventional IP broadcast service in subscriber network is achieved by delivering IP broadcast data to IPTV terminal through switch in router. In this case, transmission method delivers data in unicast form. Therefore, when N people connected to the same switch watch one channel, N channels are set between the broadcast service node and the subscriber's IPTV terminal, and when the bandwidth required by one channel is M, the broadcast service node, the router, and the switch The liver consumes N * M bandwidth.

In order to make up for the shortcomings of unicast, a multicast method has been developed. In case of transmitting data in the form of multicast, when N people connected to the same switch watch one channel, one channel is set between the broadcast service node and the router, and thus the bandwidth consumed between the router and the switch is reduced to M. Can be.

Due to advantages such as bandwidth reduction of multicast transmission method compared to unicast transmission method, many IPTV operators and device producers are adopting multicast transmission method as a base. However, the multicast protocol (IGMP) currently used in most IP broadcasting services is an open protocol that is weak in security, and there is a problem that even a subscriber who knows only the multicast IP allocated for a TV channel can use all broadcasting services. Therefore, it is necessary to manage the security of the broadcasting channel that enables the service to be used only for the broadcasting channel contracted with the IP broadcasting service provider for each subscriber.

An object of the present invention is to provide an IP broadcasting service using a subscriber profile when providing a IP broadcasting service in a subscriber network while providing a security function for a specific channel using a subscriber profile in a layer 2 switch device. An apparatus and a method for selectively providing the same are provided.

Another technical problem to be solved by the present invention is to use a subscriber profile in a layer 2 switch device to perform a method of selectively providing an IP broadcasting service on a computer while providing efficient channel security management for protecting intellectual property rights on a specific channel. The present invention provides a computer-readable recording medium having recorded thereon a program.

In order to achieve the above technical problem, a router according to the present invention is connected to a subscriber authentication server, a broadcast service node, and a switch connected to a subscriber terminal to provide an IPTV service to the subscriber terminal. Received from the subscriber authentication server for receiving and transmitting the result after receiving the subscriber authentication server; An IGMP message processing unit for determining whether to transmit broadcast data to the switch by processing an IPTV service related message of the subscriber station using the IGMP protocol from the switch; And a first subscriber profile manager, which manages at least one subscriber information connected to the switch, and transmits the subscriber information to a switch when the authentication request of the subscriber is approved.

In order to achieve the above technical problem, the switch according to the present invention is connected to a router providing subscriber information and broadcast data, and provides a switch for providing IPTV service to at least one or more subscriber stations. A control message transmission unit for receiving a channel reception / end message to determine whether the subscriber station is a legitimate request for an available broadcast channel; A second subscriber profile manager configured to store a subscriber profile received from the router; And a broadcast data processing unit for transmitting only the data of the broadcast channel allowed to the subscriber based on the channel information of the broadcast data and the subscriber profile and blocking the others.

In order to achieve the above technical problem, an IPTV service providing method according to the present invention is a method for providing an IPTV service in a network consisting of a router, a switch, and a subscriber station, wherein the switch requests / ends an approval request and a broadcast channel from the subscriber station. Receiving a request and forwarding an authorization request to the router; Determining, by the router that has received the approval request, a transmission of subscriber information to the switch if positive; Determining whether to allow a broadcast channel requested by the subscriber station based on the subscriber information after storing the subscriber information; Receiving, by the router, a channel request message according to the permission determination, transmitting broadcast data corresponding to the broadcast channel to the switch; And determining, by the switch, whether to deliver broadcast channel information to the subscriber terminal based on the subscriber information.

Hereinafter, an apparatus and method for selectively providing an IP broadcast service in a subscriber network according to the present invention will be described in detail with reference to the accompanying drawings.

2 is a block diagram illustrating an embodiment of a router and a switch according to the present invention.

Referring to FIG. 2, the router 210 according to the present invention includes a subscriber authentication processor 211, an IGMP message processor 215, and a subscriber profile manager 213. In addition, the router 210 is connected to the subscriber authentication server 250 on the network side, the broadcast service node 240 and the switch 220 on the subscriber side.

The broadcast service node 240 is a system for transmitting broadcast data to one or more subscriber networks. The broadcast service node 240 attaches a multicast IP to MPEG-2 or MPEG4 type video data and transmits it to a router of the subscriber network.

The switch 220 is a device located at the end of the network and multiplexes a plurality of subscriber traffics. The switch 220 includes a control message transmitter 221, a broadcast data processor 225, and a subscriber profile manager 223. The switch 220 corresponds to a leaf that is the end of the subscriber network, and the transmission between the router 210 and the switch 220 transfers data in an Ethernet manner. The router 210 delivers IP broadcast data according to a broadcast channel request message (IGMP Report Message) transmitted from all subscriber stations 230 connected to the switch 220 which is the terminal. Therefore, there is a need for a means for filtering to deliver only the broadcast channel allowed for each subscriber in the switch 220, the end of the subscriber network. In the conventional method, since all broadcast channels can be used if only the multicast IP of the broadcast channel data is known, a high level of security means is required for data with added value such as broadcast data.

The subscriber authentication processor 211 of the router 210 receives a subscriber authentication request message from the switch 220 when the subscriber terminal 230 is connected. Upon receiving the authentication request message, the subscriber authentication processor 211 transmits the message to the authentication server, and if the authentication is successful, transmits the authentication result to the subscriber profile manager 213.

The subscriber profile manager 213 manages a list of broadcast channels available to the subscriber in the form of a profile, and transmits the subscriber profile to the switch 220 as a result of the subscriber authentication step after the subscriber accesses the service. At this time, the form of the subscriber profile is a subscriber ID, the MAC address of the subscriber station and the available channel list. The available channel list is implemented in the form of a bitmap. That is, when the number of channels provided by the broadcast service is n, n bits are used to manage 1 in a usable channel and 0 in an unavailable channel form. At this time, the relationship between the order of each bit and the broadcast channel information is defined in advance. The subscriber profile is delivered to the switch to which the subscriber is connected as a result of the subscriber authentication step.

The IGMP message processing unit 215 of the router 210 receives a broadcast channel request and a channel termination message from the subscriber station 230 connected to the switch 220, and transmits the multicast IP according to the received broadcast related message. The broadcast data is transmitted to the interface to which a specific switch is connected or the transmission is stopped.

After the control message transmitter 221 of the switch 220 receives the subscriber authentication message and the broadcast channel request and channel termination message from the subscriber terminal 230, the subscriber authentication message is transmitted to the subscriber authentication processor 211 of the router 210. After transmitting to the bitmap of the subscriber profile, it is determined whether the requested channel is requested, and then the authorized channel request message is transmitted to the router 210, and the request message for the unauthorized channel is filtered.

The subscriber profile manager 223 of the switch receives and stores the subscriber profile of the subscriber from the router 210 after authentication of the subscriber, and provides the corresponding information to the control message transmitter 221 and the broadcast data processor 225. .

The broadcast data processing unit 225 of the switch receives the subscriber profile from the subscriber profile manager 223 and compares the channel information of the broadcast data transmitted from the router 210 with the bitmap of the profile, thereby allowing the subscriber to use the broadcast channel. Only data is output to the subscriber station, and broadcast channel data that is not available to the subscriber is filtered out. Thus, when providing the IP broadcasting service in the subscriber network, even if the router 210 multicasts the broadcast data regardless of channel security, the switch 220 increases the security level of the broadcast data by filtering the broadcast channel for each subscriber. Can be.

3 is a flowchart showing in detail the process of IP broadcast filtering in a switch according to the present invention.

Referring to FIG. 3, when a subscriber station 230 to receive an IPTV service requests subscriber authentication and a broadcast channel (S301), the switch 220 receiving the IPTV service transmits an authentication request message to the router (S301). , S302). The subscriber authentication processing unit 211 of the router 210 receives the authentication request (S304), and transmits it to the authentication server (S305). The authentication server performs subscriber authentication and transmits the result (S306). If the authentication is successful, the router 210 transmits the subscriber profile manager 213 of the router to the switch 220 (S308). The switch 220 stores the subscriber profile (S309), compares the subscriber profile with the broadcast channel requested by the subscriber, and determines whether the channel is allowed (S310). (S311). Receiving this (S312), the router transmits the broadcast data received from the broadcast service node to the switch (S313). The switch receives the broadcast data to determine whether to transmit the broadcast data to the subscriber station (S314), and then determines whether the broadcast channel matches the subscriber profile (S315), and if so, sends the broadcast data to the subscriber station. Transmit (S316). The subscriber station now receives broadcast data from the switch (S317) and sends it to the subscriber station.

4 is an embodiment of a subscriber profile according to the present invention.

Referring to FIG. 4, a subscriber profile consists of a subscriber ID 410, a MAC address 430 of a terminal, and a bitmap 430 of an available broadcast channel. The size of the bitmap 430 is equal to the number of broadcast channels, and each bit is mapped to the broadcast channel. Each bit has a value of 0 or 1, where a value of 0 means that a broadcast channel indicated by each bit cannot be viewed, and a value of 1 means that a corresponding broadcast channel can be viewed.

The method for selectively providing an IPTV service according to the present invention can also be embodied as computer readable codes on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like, and may also be implemented in the form of a carrier wave (for example, transmission over the Internet). Include. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

The foregoing descriptions are merely illustrative of preferred embodiments, and the present invention is not limited to the above-described embodiments and can be variously changed within the scope of the appended claims. For example, the shape and structure of each component specifically shown in the embodiment of the present invention may be modified.

As described above, according to the apparatus and method for selectively providing an IP broadcasting service using the subscriber profile according to the present invention, the switch transmits only the channel contracted by the subscriber to the subscriber station using the subscriber information in the subscriber profile. By filtering broadcast data for each subscriber, it is possible to increase the security level of the broadcast data.

Claims (16)

A router for providing an IPTV service to a subscriber terminal by accessing a subscriber authentication server, a broadcast service node, and a switch connected to the subscriber terminal, A subscriber authentication processor for receiving a subscriber's authentication request from the switch and transmitting the subscriber's authentication request to the subscriber authentication server; An IGMP message processing unit for determining whether to transmit broadcast data to the switch by processing an IPTV service related message of the subscriber station using the IGMP protocol from the switch; And And a first subscriber profile manager, which manages at least one subscriber information connected to the switch, and transmits the subscriber information to a switch when an authentication request of the subscriber is approved. The method of claim 1, wherein the first subscriber profile management unit And managing the subscriber information in the form of a profile including a subscriber ID, a MAC address of a subscriber station, and a list of channels available to the subscriber. The method of claim 2, wherein the channel list is And a bitmap, each representing an available channel and an unavailable channel. A switch for providing an IPTV service to at least one subscriber station by connecting to a router providing subscriber information and broadcast data, A control message transmission unit for receiving an authentication request message and a broadcast channel reception / end message from the subscriber station to determine whether the subscriber station is a legitimate request for an available broadcast channel; A second subscriber profile manager configured to store a subscriber profile received from the router; And And a broadcast data processor configured to transmit only the data of the broadcast channel allowed to the subscriber based on the channel information of the broadcast data and the subscriber profile and to block other data. The method of claim 4, wherein the control message transmission unit The authentication request message is transmitted to the router, and the broadcast channel reception message is analyzed based on the subscriber profile, and if the channel is allowed to the subscriber station, the channel request is made to the router. Switch made. The method of claim 4, wherein the subscriber profile is And a channel list in which the subscriber ID, the MAC address of the subscriber station, and the channels available to the subscriber are represented by bitmaps. A switch configured to receive a broadcast service request message from at least one subscriber station, transmit the broadcast service request message to a router, and transmit allowed broadcast channel data for each of the authorized subscriber stations based on the subscriber information transmitted by the router; A router for maintaining the subscriber information and transmitting the subscriber terminal's approval result, the subscriber information, and the broadcast channel data to the switch according to a request of the switch; A subscriber authentication server connected to the router to process subscriber approval; And IPTV service providing system comprising a; broadcast service node for transmitting broadcast data to the router. The method of claim 7, wherein the subscriber information is IPTV service providing system, characterized in that configured in the form of a profile including a subscriber ID, the MAC address of the subscriber station, the list of channels available to the subscriber. The method of claim 8, wherein the channel list is An IPTV service providing system, comprising: a bitmap representing available channels and unavailable channels, respectively. The method of claim 7, wherein the switch A control message transmission unit for receiving an authentication request message and a broadcast channel reception / end message from the subscriber station to determine whether the subscriber station is a legitimate request for an available broadcast channel; A second subscriber profile manager configured to store a subscriber profile received from the router; And And a broadcast data processing unit for transmitting only the data of the broadcast channel allowed to the subscriber based on the channel information of the broadcast data and the subscriber profile, and otherwise blocking the broadcast data. The method of claim 10, wherein the control message transmission unit The authentication request message is transmitted to the router, the broadcast channel reception message is analyzed based on the subscriber profile, and if the channel is allowed to the subscriber station, the channel request is made to the router. IPTV service providing system characterized in that. 8. The router of claim 7, wherein the router is A subscriber authentication processing unit for receiving the subscriber's authentication request from the switch and transmitting the subscriber's authentication request to the subscriber authentication server; An IGMP message processing unit for determining whether to transmit broadcast data to the switch by processing an IPTV service related message of the subscriber station using the IGMP protocol from the switch; And And a first subscriber profile manager, which manages at least one subscriber information connected to the switch, and transmits the subscriber information to a switch when an authentication request of the subscriber is approved. In the method of providing an IPTV service in a network consisting of a router, a switch, and a subscriber terminal, (a) the switch receiving the grant request and the broadcast channel request / end request from the subscriber station and forwarding the grant request to the router; (b) the router receiving the approval request determines whether to approve, and if the approval is made, transmitting the subscriber information to the switch; (c) storing, by the switch, the subscriber information received from the router and determining whether to allow a broadcast channel requested by the subscriber station based on the subscriber information; (d) the router receiving the channel request message according to the permission decision of step (c) transmitting the broadcast data corresponding to the broadcast channel to the switch; And (e) determining, by the switch, whether to deliver broadcast channel information to the subscriber terminal based on the subscriber information. The method of claim 13, wherein step (a) (a1) forwarding the authentication request message to the router; And (a2) analyzing the broadcast channel request message and transmitting the broadcast channel request message to the router if the requested broadcast channel is allowed to the subscriber station; and blocking the broadcast channel request message if the broadcast channel request message is not allowed; How we deliver the service. The method of claim 13, wherein step (b) And configuring the subscriber information into a subscriber ID, a subscriber station MAC address, and a channel list available to the subscriber, wherein the available channel list is transmitted in a bitmap form. The method of claim 13, wherein step (e) And transmitting broadcast data only when the channel list of the subscriber information matches the broadcast channel.

Images