Patent Application
20160165279
This application claims the benefit of Korean Patent Application Nos. 10-2014-0172958 and 10-2015-0137290, filed Dec. 4, 2014 and Sep. 30, 2015, respectively, which are hereby incorporated by reference herein in their entirety.
1. Technical Field
The present disclosure relates generally to technology for processing interfacing in a Renewable Conditional Access System (RCAS), and more particularly to technology for processing interfacing between a Distributed Authorization Center (DAC) and a Conditional Access Module (CAM) Authentication module Sub-System (CASS).
2. Description of the Related Art
Recently, the International Telecommunications Union Telecommunication Standardization Sector (ITU-T) has been developing an RCAS network protocol that can remotely renew Conditional Access Client Software (CACS) for digital cable broadcasting.
A technology regarding a conditional access system is disclosed in Korean Patent No. 10-0835984 (registered Jun. 2, 2008) entitled “Method and Apparatus for Renewing Conditional Access System for Digital Cable Broadcasting.” This technology is configured to, when a conditional access system renewal message is received from a headend, send a conditional access system renewal request message to a set-top box, and, when a system renewal response message is received from the set-top box, receive a system renewal program from the headend, applies the system renewal program, and provide notification of this to the set-top box and the headend.
However, the RCAS network protocol under development defines only message structures, and does not define content that is inserted into the payloads of messages.
Therefore, in light of recent tendency toward the extension of fields using an RCAS network, as in the field of IPTV, there is an increasing need to define content that is inserted into the payloads of messages based on the RCAS network protocol.
At least one embodiment of the present invention is intended to define content to be inserted into message payloads in the form of ASN. 1 in connection with messages transmitted between a DAC and a CASS in an RCAS.
At least one embodiment of the present invention is intended to effectively perform the authentication of an STB constituting part of an RCAS using messages transmitted between a DAC and a CASS as defined in the present invention.
At least one embodiment of the present invention is intended to efficiently transfer the result of the authentication of an STB to a CASS using messages transmitted between a DAC and the CASS as defined in the present invention.
In accordance with an aspect of the present invention, there is provided a method of transmitting messages between a Distributed Authorization Center (DAC) and a Conditional Access Module (CAM) Authentication module Sub-System (CASS) in a Renewable Conditional Access System (RCAS) headend of an RCAS, the method including: transmitting, by a CASS, a subscription message for a subscription request to a DAC when receiving a subscription request from a Set-Top Box (STB); processing, by the DAC, the subscription of the STB based on the subscription message received from the CASS; and transmitting, by the DAC, a response message including security parameters to the CASS.
The subscription message may include an ID corresponding to the CASS and a key pairing ID.
The key pairing ID may be generated by concatenating the ID of the CAM of the STB and the ID of the descrambler of the STB.
Processing the subscription of the STB may include: validating the pairing between the CAM and the descrambler based on the key pairing ID; and performing the authentication of the STB based on the result of the validation of the pairing.
Validating the pairing may include performing validation based on whether the ID of the CAM and the ID of the descrambler are present in a database of the DAC.
Transmitting the response message may include transmitting the response message including the result of the authentication.
Transmitting the response message may include transmitting the response message including a key pairing key when the pairing has been successfully validated.
Transmitting the response message may include transmitting the response message including the value signature of the signature of the key pairing key.
Each of the subscription message and the response message may be defined in the ASN.1 syntax format.
The subscription message and the response message may have different message type values.
The security parameters may include any one or more of the result of the authentication of the STB, values adapted to generate a session key, a key pairing key, and the value signature of the signature of the key pairing key.
The values adapted to generate a session key may include any one or more of a random value assigned to the STB by the DAC, and a Kc value calculated based on the random value and a Ki value.
The Ki value may be a number generated by a Centralized Authorization Center (CAC) corresponding to the STB, and a value inserted into the CAM of the STB.
The random value assigned to the STB by the DAC may be a value generated by the DAC and inserted into the CAM of the STB.
In accordance with another aspect of the present invention, there is provided a Renewable Conditional Access System (RCAS) headend of an RCAS, including: a Conditional Access Module (CAM) Authentication module Sub-System (CASS) configured to transmit a subscription message adapted to transfer a subscription request to a Distributed Authorization Center (DAC) when receiving a subscription request from a Set-Top Box (STB); and the DAC configured to process the subscription of the STB based on the subscription message received from the CASS, and to transmit a response message including security parameters to the CASS.
The subscription message may include an ID corresponding to the CASS and a key pairing ID.
The key pairing ID may be generated by concatenating the ID of the CAM of the STB and the ID of the descrambler of the STB.
The DAC may be further configured to validate the pairing between the CAM and the descrambler based on the key pairing ID, and to perform the authentication of the STB based on the result of the validation of the pairing.
The DAC may be further configured to transmit the response message including a key pairing key and the value signature of the signature of the key pairing key.
Each of the subscription message and the response message may be defined in the ASN.1 syntax format.
The above and other objects, features and advantages of the present invention will be more clearly understood from the following detailed description taken in conjunction with the accompanying drawings, in which:
Embodiments of the present invention will be described in detail below with reference to the accompanying drawings. Redundant descriptions and descriptions of well-known functions and configurations that have been deemed to make the gist of the present invention unnecessarily obscure will be omitted below. The embodiments of the present invention are intended to fully describe the present invention to persons having ordinary knowledge in the art to which the present invention pertains. Accordingly, the shapes, sizes and the like of components in the drawings may be exaggerated to make the description obvious.
First, terms and acronyms used herein are defined.
The term “conditional access” refers to the conditional authorization of access to cable service or content.
The term “scrambling” refers to the process of encrypting sounds, images or like so that an unauthenticated group or an unauthenticated user cannot use the sounds, the images or the like.
The term “descrambling” refers to the process of converting data, sounds, images or the like using a reverse scrambling function so that they can be used.
The term “Entitlement Control Message (ECM)” refers to information including information obtained by encrypting a control word and criteria for access to various services.
The term “Entitlement Management Message (EMM)” refers to information obtained by encrypting and sending entitlement to reception.
The acronym of “Conditional Access Client Software” is CACS.
The acronym of “Conditional Access Module” is CAM.
The acronym of “CAM Sub-System” is CASS.
The acronym of “Distributed Authorization Center” is DAC.
The acronym of “Renewable Conditional Access System” is RCAS.
A secure Conditional Access Client Software download sub-system corresponds to a secure CACS download sub-system.
Embodiments of the present invention are described in detail with reference to the accompanying drawings.
An RCAS includes a CAC, a plurality of RCAS headends, and an STB connected to each of the RCAS headends.
In this case, a conditional access system refers to a system that allows a digital receiver (STB) of a user to determine whether to receive a specific broadcast program.
In this case, the conditional access system corresponds to technology for renewing CACS, and uses a method of securely downloading new CACS over a bidirectional digital cable.
That is, the conditional access system refers to a system that allows only users who have acquired access rights through a legitimate license fee or the like to view a program.
In this case, the conditional access system may transfer a private key to the STB using a smart card having the unique personal information of a subscriber.
In this case, the STB that has received the private key may view a specific broadcast program using the private key.
In this case, each of the headends 100 includes a DAC, a CASS, and an SCDSS.
In this case, the plurality of headends 100 may be present in a single CAC. The reason for this is that only a single headend 100 cannot covers an overall service area.
That is, a single DAC is present in each of the headends 100, and a plurality of DACs is connected to a single CAC.
The reason for this is to efficiently control an authentication procedure for a plurality of STBs.
As shown in
Accordingly, the CAC and DACs have a 1:N correspondence, and the DACs and CASSs have a 1:1 correspondence.
In this case, the STB may include a CAM and a descrambler.
A CAM refers to a PC card-type electronic device that is inserted into a subscriber terminal device (an STB or the like) to perform conditional access.
In this case, the CAM provides a slot into which a smart card can be inserted.
In this case, when a scrambled broadcast signal and a control command are transferred to the STB, the CAM may check access rights using a conditional access function present in the smart card.
In this case, the descrambler inside the STB may provide a complete image by descrambling the scrambled signal.
Scrambling refers to technology that encodes or encrypts signals using an appropriate method, thereby enabling the scrambled signals not to be understood by a general recipient. For example, when normal screens are encrypted and transmitted in a scrambled state, a general recipient cannot receive the normal screens.
In this case, when the scrambled screens are descrambled, the normal screens are received.
In this case, to descramble the scrambled screens, a specific decoder and an encryption key are required. Using a method of providing the encryption key only to specific recipients, the normal screens may be provided only to the specific recipients.
Referring to
In this case, the RCAS headend 100 is located in a cable broadcasting station.
In this case, the CASS 120 functions to establish a secure channel between the RCAS STB 150 and the RCAS headend 100.
In this case, the SCDSS 130 functions to send a conditional access client image down to the RCAS STB 150 over the secure channel after the secure channel has been established between the headend 100 and the RCAS STB 150.
In this case, the DAC 110 may function to issue certificates to RCAS headend servers and manage the certificates.
In this case, the DAC 110 may generate the unique IDs of the headend server.
In this case, the DAC 110 may validate and manage the pairing between a CAM and a descrambler inside the STB.
In this case, the DAC 110 may manage parameters required for the authentication of STBs.
In this case, the DAC 110 may process the subscription and subscription cancellation of the retail and lease RCAS STB 150 received from the CASS 120.
In this case, the CAC may process the subscription and subscription cancellation of RCAS-related servers and RCAS STBs 150 located in headends that are separately present.
Referring to
In this case, values encoded in ASN.1 format are inserted into message content.
ASN. 1 is a protocol that was defined by the ITU-T and defines data exchange over a network. ASN. 1 belongs to the presentation layer, i.e., one of the seven layers of the OSI reference model, and refers to a notation for describing data structures.
Currently, the ITU-T Study Group (SG) 9 defines only message structures, but does not define content that is inserted into message payloads.
That is, the present invention is intended to define content that is inserted into message payloads using the ASN.1 syntax, which is a protocol description method defined by the ITU/ISO/IEC. When the method defined by the present invention is employed, information for the authentication of the RCAS STB may be effectively transferred from the CASS to the DAC, and the result of the authentication may be effectively transferred from the DAC to the CASS.
First, referring to
The CASS 120 transmits a subscription message AMFB_TRANS_INFO to the DAC 110.
In this case, the subscription message may be a message for a subscription request when a subscription request is transferred from an STB to the CASS 120.
In this case, the subscription message may be encoded in the form of the ASN.1 syntax.
In this case, the message type value of the subscription message may be 0x0401.
Descriptions of parameters used for subscription messages and response messages are listed in Table 1 below:
Referring to
In this case, the key pairing ID is a value that is transmitted by the CAM inside an STB, and is generated by concatenating the CAM ID and the descrambler ID DSC_ID.
The DAC 110 may process the subscription of the STB based on a subscription message received from the CASS 120.
In this case, the DAC 110 that has received the subscription message may validate the pairing between the CAM and the descrambler based on a key pairing ID inside the subscription message, and may perform the authentication of the STB based on the result of the validation of the pairing.
In this case, the DAC 110 may transmit a response message including the result of the authentication of the STB.
In this case, the DAC 110 may validate the pairing between the CAM and the descrambler based on whether CASS_ID and DSC_ID included in the key pairing ID are present in a database inside the DAC 110.
In this case, the DAC 110 may generate a key pairing key when the pairing has been successfully validated.
In this case, the key pairing key may be used to encrypt or decrypt a control word.
The control word refers to a key that is used to descramble and scramble broadcast content or the like.
Furthermore, the generated key pairing key may be transmitted to the CASS 120 in the state of being included in a response message.
Furthermore, the value signature of the signature of the key pairing key may be also transmitted to the CASS 120 in the state of being included in the response message.
In this case, the subscription of the STB may be processed based on the result of the authentication of the STB.
In this case, the DAC 110 may transmit a response message AMFB_AUTH_INFO_RECV, including security parameters, to the CASS 120.
In this case, the response message may be also encoded in the form of the ASN.1 Syntax.
In this case, the message type value of the response message may be 0x0400. That is, the message type value of the response message may be different from that of the subscription message.
In this case, the security parameters refer to parameters that are generated by utilizing Ki and the operator variant algorithm configuration field of the STB.
In this case, the security parameters are described in detail below with reference to
Referring to
First, the response message may include the result of the authentication of an STB. In
In this case, when the authentication of the STB succeeds, an auth_Rst value is represented as “true.”
Furthermore, when the authentication of the STB fails, an auth_Rst value is represented as “false.”
Furthermore, values for generating a session key may be included in the response message.
In
RandDAC is a value that is generated by the DAC to generate a session key, and may be inserted into the CAM of the RCAS STB.
In this case, RandDAC may be inserted into the CAM during the manufacture of the STB.
Furthermore, RandDAC may vary according to each STB, and corresponds to a number that is randomly generated by the DAC.
Kc corresponds to an input value for generating a session key.
Furthermore, Kc may be generated by means of a random number generation function using a Ki value and the value of RandDAC as inputs.
In this case, the Ki value is a value that is randomly generated for each STB by the CAC, and may be inserted into the CAM during the manufacture of the STB.
Furthermore, a key pairing key KPK may be included in a response message.
Furthermore, the value signature sign-KPK of the signature of the key pairing key may be included in the response message.
Referring to
In this case, the subscription message may refer to a message for a subscription request when a subscription request is transferred from an STB to the CASS.
In this case, the subscription message may be encoded in the form of the ASN.1 syntax.
In this case, the message type value of the subscription message may be 0x0401.
The subscription message includes a CASS ID and a key pairing ID.
In this case, the key pairing ID is a value that is transmitted by the CAM inside the STB, and is generated by concatenating the CAM ID and the descrambler ID DSC_ID.
Furthermore, the DAC 110 processes the subscription of the STB based on a subscription message received from the CASS 120 at step S730.
In this case, the DAC 110 that has received the subscription message may validate the pairing between the CAM and the descrambler based on a key pairing ID inside the subscription message, and may perform the authentication of the STB based on the result of the validation of the pairing.
In this case, the DAC 110 may validate the pairing between the CAM and the descrambler based on whether CASS_ID and DSC_ID included in the key pairing ID are present in a database inside the DAC 110.
In this case, the DAC 110 may generate a key pairing key when the pairing has been successfully validated.
In this case, the subscription of the STB may be processed based on the result of the authentication of the STB.
Furthermore, the DAC transmits a response message including security parameters at step S740.
In this case, the DAC 110 may transmit a response message including the result of the authentication of the STB.
Furthermore, the generated key pairing key may be transmitted to the CASS 120 in the state of being included in the response message.
Furthermore, the value signature of the signature of the key pairing key may be also transmitted to the CASS 120 in the state of being included in the response message.
In this case, the security parameters may correspond to RandDAC and Ki, as shown in
The method for transmitting messages between a DAC and a CASS according to the present invention may be implemented in the form of program instructions and then recorded in a computer-readable storage medium. The computer-readable storage medium may include program instructions, data files, and data structures solely or in combination. Program instructions recorded on the storage medium may have been specially designed and configured for the present invention, or may be known to or available to those who have ordinary knowledge in the field of computer software. Examples of the computer-readable storage medium include all types of hardware devices specially configured to record and execute program instructions, such as magnetic media, such as a hard disk, a floppy disk, and magnetic tape, optical media, such as compact disk (CD)-read only memory (ROM) and a digital versatile disk (DVD), magneto-optical media, such as a floptical disk, ROM, random access memory (RAM), and flash memory. Examples of the program instructions include machine code, such as code created by a compiler, and high-level language code executable by a computer using an interpreter.
As described above, the RCAS headend of the RCAS and the method for transmitting messages between a DAC and a CASS inside the headend according to the present invention are not limited to the configurations and methods of the above-described embodiments, but some or all of the embodiments may be configured to be selectively combined such that the embodiments can be modified in various manners.
According to at least one embodiment of the present invention, content to be inserted into message payloads can be defined in the form of ASN. 1 in connection with messages transmitted between the DAC and the CASS in the RCAS, thereby enabling the function of the RCAS to effectively operate.
According to at least one embodiment of the present invention, the authentication of the STB constituting part of the RCAS can be effectively performed using messages transmitted between the DAC and the CASS as defined in the present invention.
According to at least one embodiment of the present invention, the result of the authentication of an STB can be efficiently transferred to the CASS using messages transmitted between the DAC and the CASS as defined in the present invention.
Although the preferred embodiments of the present invention have been disclosed for illustrative purposes, those skilled in the art will appreciate that various modifications, additions and substitutions are possible without departing from the scope and spirit of the invention as disclosed in the accompanying claims.
| Number | Date | Country | Kind |
|---|---|---|---|
| 10-2014-0172958 | Dec 2014 | KR | national |
| 10-2015-0137290 | Sep 2015 | KR | national |
