CN102523503A

CN102523503A - Video-on-demand control method and relative device and system

Info

Publication number: CN102523503A
Application number: CN2011104264217A
Authority: CN
Inventors: 胡子付
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2011-12-19
Filing date: 2011-12-19
Publication date: 2012-06-27
Anticipated expiration: 2031-12-19
Also published as: CN102523503B

Abstract

The embodiment of the invention relates to the field of video on demand and discloses a video-on-demand control method and a relative device and a system, wherein the video-on-demand control method comprises the following steps that a content delivery network (CDN) device receives a heartbeat information sent by a set-top-box (STB), wherein the heartbeat information carries an integrated circuit (IC) card number ciphertext; the CDN device obtains the IC card number ciphertext from the heartbeat information and decrypts the IC card number ciphertext by using a stored decryption key to obtain an IC card number plaintext; and if the IC card number plaintext obtained by decrypting is empty, the CDN device stops pushing the video stream on demand to the STB. The embodiment of the invention can effectively prevent a plurality of STBs from using one IC card jointly at the same time to realize video on demand business and reduce revenue loss of TV operators.

Description

A kind of video-on-demand control method and relevant device, system

Technical field

(Video On Demand, VOD) field is specifically related to a kind of video-on-demand control method and relevant device, system to the present invention relates to video request program.

Background technology

The VOD system is a kind of by STB (Set-top Box; STB), electronic program guides (Electronic Program Guide; EPG) equipment, backstage service management (BackOffice) equipment and content distributing network (Content Delivery Network, CDN) the interactive television VOD system of equipment composition.Wherein, STB is mainly used in and is responsible for the electronic programming displaying, uses the interface for the user provides; EPG equipment is mainly used in is responsible for the electronic programming generation; BackOffice is provided with and is mainly used in responsible user log-in authentication, program request authorisation process; CDN equipment is mainly used in is responsible for storage and distribution of video stream.

The video request program flow process simplified summary of VOD system is following: the user selects to trigger STB to EPG equipment transmission EPG homepage access request after the VOD business, carries parameters for authentication (like Mac address, STB version number and the STB decoding capability etc. of STB) in this EPG homepage access request; EPG equipment is sent to BackOffice equipment through authentication request with parameters for authentication and carries out authentication, if the BackOffice device authentication passes through, then EPG generates the EPG homepage and returns to STB and shows; When the user browses the EPG homepage and selects playing programs, STB equipment will send the program authorization requests to BackOffice equipment through EPG equipment, carry the parameters such as column numbering at program ID, program place in this program authorization requests; When BackOffice UC user has the right to accept within limits when seeing this program, EPG equipment issues the program request parameter to STB, trigger STB and get into the program request flow process, wherein, comprise in the program request parameter play URL (Uniform Resource Locator, URL); STB sends the on-demand session request of creating to play URL to CDN equipment, and CDN equipment pushes video flowing to STB after accepting to create on-demand session, and STB utilizes IC-card (IC-card is called smart card again) to carry out the decoding and the broadcast of video flowing.

In the VOD system; Whether STB can periodically detect IC-card and exist; If do not exist, then point out the user to insert IC-card, if the user does not insert IC-card within a certain period of time; STB is forced shutdown so, thereby can prevent that simultaneously shared same the IC-cards of a plurality of STB from realizing that VOD is professional and causing the television operator income to run off.Yet, detect IC-card by STB and whether exist the fail safe of this a kind of mode relatively poor, be easy to by illegal STB or software terminal identification, thereby can't prevent effectively that simultaneously shared same the IC-card realization of a plurality of STB VOD is professional.

Summary of the invention

The embodiment of the invention provides a kind of video-on-demand control method and relevant device, system, can prevent effectively that simultaneously shared same the IC-cards of a plurality of STB from realizing that VOD is professional, reduces the television operator income and runs off.

A kind of video-on-demand control method comprises:

The heartbeat message that content distributing network equipment receiving set up box sends carries the IC-card ciphertext in the said heartbeat message;

Said content distributing network equipment obtains said IC-card ciphertext from said heartbeat message, and utilizes the decruption key of storage that said IC-card ciphertext is deciphered, to obtain the IC-card plaintext;

If said IC-card plaintext be empty, the pushing video streaming that then said content distributing network equipment stops program request being looked is said STB extremely.

A kind of video-on-demand control method comprises:

The IC-card that backstage service management BackOffice equipment received content distributing network equipment sends number checking request carries the IC-card ciphertext and authorizes sign Purchase Token in number checking request of said IC-card;

The decruption key of said BackOffice equipment utilization storage is deciphered said IC-card ciphertext, to obtain the IC-card plaintext;

If said IC-card plaintext is empty, then said BackOffice equipment sends verification failed message to said content distributing network equipment, triggers said content distributing network equipment transmission and creates the on-demand session failed message to STB.

A kind of video-on-demand control method comprises:

STB sends heartbeat message to the content distributing network equipment that carries the IC-card ciphertext; So that said content distributing network equipment deciphers obtaining the IC-card plaintext said IC-card ciphertext, and stop pushing video streaming to said STB when empty with program request at said IC-card plaintext;

Said STB detects the video flowing of whether receiving that said content distributing network equipment pushes, if not, then points out the user to insert IC-card.

A kind of content distributing network equipment comprises:

Transmit-Receive Unit is used for the heartbeat message that receiving set up box sends, and carries the IC-card ciphertext in the said heartbeat message;

Acquiring unit is used for obtaining said IC-card ciphertext from said heartbeat message;

Decryption unit is used to utilize the decruption key of storage that said IC-card ciphertext is deciphered, to obtain the IC-card plaintext;

The video flowing Dispatching Unit is used for when said IC-card plaintext is sky, stops pushing video streaming to the said STB with program request.

A kind of backstage service management device comprises:

Receiving element is used for the IC-card number checking request that received content distributing network equipment sends, and carries the IC-card ciphertext in number checking request of said IC-card and authorizes sign Purchase Token;

Control unit when the IC-card plaintext that is used for obtaining in said decryption unit deciphering is empty, sends verification failed message to said content distributing network equipment, triggers said content distributing network equipment and sends establishment on-demand session failed message to STB.

A kind of STB comprises:

Transmit-Receive Unit; Be used to send heartbeat message to the content distributing network equipment that carries the IC-card ciphertext; So that said content distributing network equipment deciphers obtaining the IC-card plaintext said IC-card ciphertext, and stop order video stream is pushed to said STB when empty at said IC-card plaintext;

Tip element is used to detect the video flowing whether said Transmit-Receive Unit receives that said content distributing network equipment pushes, and if not, then points out the user to insert IC-card.

A kind of video request program control system comprises:

STB is used to send heartbeat message to the content distributing network equipment that carries the IC-card ciphertext, and detects the video flowing of whether receiving that said content distributing network equipment pushes, if not, then points out the user to insert IC-card;

Said content distributing network equipment is used to receive the heartbeat message that said STB sends, and from said heartbeat message, obtains said IC-card ciphertext; And utilize the decruption key of storage that said IC-card ciphertext is deciphered, to obtain the IC-card plaintext; And when said IC-card plaintext is sky, stop pushing video streaming to the said STB that program request is looked.

In the embodiment of the invention; The heartbeat message that carries the IC-card ciphertext that content distributing network equipment can receiving set up box sends in real time; And from heartbeat message, obtain the IC-card ciphertext; And the decruption key that utilizes storage deciphers obtaining the IC-card plaintext this IC-card ciphertext, and when the IC-card plaintext that obtains in deciphering be sky, the pushing video streaming that content distributing network equipment can stop program request being looked was to STB.Through this scheme; Content distributing network equipment can be deciphered through the IC-card ciphertext that heartbeat message sends in real time STB in the broadcast stage; When the IC-card that obtains when deciphering number expressly is sky; Explain that then IC-card transferred to STB, the pushing video streaming that content distribution device can stop program request being looked is to STB.

In the embodiment of the invention; The backstage service management device can received content distributing network equipment sends carries IC-card ciphertext and the IC-card of authorizing sign Purchase Token number checking request; And utilize the decruption key of storage that this IC-card ciphertext is deciphered to obtain the IC-card plaintext; When the IC-card plaintext of deciphering acquisition is sky; The backstage service management device can send verification failed message to content distributing network equipment, makes content distributing network equipment send and creates the on-demand session failed message to STB.Through this scheme; The backstage service management device can be deciphered through the IC-card ciphertext of IC-card number checking request transmission content distributing network equipment at the establishment session stage; When the IC-card that obtains when deciphering number expressly is sky; Explain that then IC-card transferred to STB, the backstage service management device will not allow STB to create on-demand session.

In sum, the embodiment of the invention can detect whether insertion machine top box of IC by content distributing network equipment or backstage service management device, if not, forbids that then STB realizes that VOD is professional.Compare with the mode whether existing STB detection IC-card exists, the embodiment of the invention can prevent effectively that simultaneously shared same the IC-cards realization of a plurality of STB VOD is professional, reduces the income loss of television operator.

Description of drawings

In order to be illustrated more clearly in the technical scheme in the embodiment of the invention; To do to introduce simply to the accompanying drawing of required use among the embodiment below; Obviously, the accompanying drawing in describing below only is some embodiments of the present invention, for those of ordinary skills; Under the prerequisite of not paying creative work property, can also obtain other accompanying drawing according to these accompanying drawings.

Fig. 1 is the flow chart of a kind of video-on-demand control method of providing of the embodiment of the invention one;

Fig. 2 is the flow chart of a kind of video-on-demand control method of providing of the embodiment of the invention two;

Fig. 3 is the flow chart of a kind of video-on-demand control method of providing of the embodiment of the invention three;

Fig. 4 is the flow chart of a kind of video-on-demand control method of providing of the embodiment of the invention four;

Fig. 5 is the structure chart of a kind of content distributing network equipment of providing of the embodiment of the invention five;

Fig. 6 is the structure of the another kind of content distributing network equipment that provides of the embodiment of the invention five;

Fig. 7 is the structure chart of a kind of backstage service management device of providing of the embodiment of the invention six;

Fig. 8 is the structure chart of the another kind of backstage service management device that provides of the embodiment of the invention six;

Fig. 9 is the structure chart of another backstage service management device of providing of the embodiment of the invention six;

Figure 10 is the structural representation of a kind of STB of providing of the embodiment of the invention seven;

Figure 11 is the structural representation of the video request program control system that provides of the embodiment of the invention eight.

Embodiment

To combine the accompanying drawing in the embodiment of the invention below, the technical scheme in the embodiment of the invention is carried out clear, intactly description, obviously, described embodiment only is the present invention's part embodiment, rather than whole embodiment.Based on the embodiment among the present invention, those of ordinary skills are not making the every other embodiment that is obtained under the creative work prerequisite, all belong to the scope of the present invention's protection.

The embodiment of the invention provides a kind of video-on-demand control method and relevant device, system, can prevent effectively that simultaneously shared same the IC-cards of a plurality of STB from realizing that VOD is professional, and the income that reduces television operator runs off.Below be elaborated respectively.

Embodiment one:

See also Fig. 1, the flow chart of a kind of video-on-demand control method that Fig. 1 provides for the embodiment of the invention one.Wherein, the embodiment of the invention one discusses in detail the video-on-demand control method that the embodiment of the invention provides from the angle of CDN equipment.As shown in Figure 1, this VOD method can may further comprise the steps:

101, CDN equipment receives the heartbeat message that STB sends, and carries the IC-card ciphertext in this heartbeat message.

Wherein, above-mentioned heartbeat message is that STB is sent to CDN equipment in real time in the process of the video flowing of decoding and the propelling movement of play CD N equipment.Wherein, STB can read IC-card number in real time; And Message Digest Algorithm 5 (MD5) or triple DEA (Triple Data Encryption Algorithm of employing agreement; 3DES) wait AES that the IC-card that reads number is encrypted obtaining the IC-card ciphertext, and this IC-card ciphertext is sent to CDN equipment through heartbeat message.In the embodiment of the invention, for the ease of describing, the IC-card that does not carry out encryption is known as is the IC-card plaintext, the embodiment of the invention is follow-up not to be repeated.

102, CDN equipment obtains the IC-card ciphertext from heartbeat message, and utilizes the decruption key of storage that this IC-card ciphertext is deciphered, to obtain the IC-card plaintext.

103, if the IC-card plaintext that deciphering obtains be a sky, then the CDN equipment pushing video streaming that stops program request being looked is to STB.

As a kind of optional execution mode; If the IC-card plaintext that the decruption key of CDN equipment utilization storage is deciphered acquisition to this IC-card ciphertext in the above-mentioned steps 102 is not sky; Whether the CDN network equipment can further contrast the IC-card plaintext of deciphering acquisition so consistent with the IC-card plaintext of storage in advance; If consistent, then CDN can continue pushing video streaming with program request to STB; If inconsistent, explain that then IC-card is illegal, CDN equipment will stop pushing video streaming with program request to SBT.This shows through this execution mode, whether the video request program control mode that the embodiment of the invention provides can also further detect the IC-card that inserts STB legal,, forbid that then STB realizes that VOD is professional if illegal.Whether legal detect IC-card mode by CDN safer, reliable, make illegal STB or software terminal be not easy identification, thereby the income that can reduce television operator runs off.

As a kind of optional execution mode, in the video-on-demand control method that the embodiment of the invention one provides, CND equipment can also be carried out following steps before carrying out above-mentioned steps 101:

11), CDN equipment receives STB to play the establishment on-demand session request that URL sends, carry the IC-card ciphertext in this establishments on-demand session request and identify Purchase Token with authorizing.

Wherein, CDN equipment, needs to create session connection with STB in advance to the STB at the video flowing that pushes program request, and CDN equipment and STB create session connection and sent the request of establishment on-demand session and trigger to play URL by STB.

12), CDN equipment is asked above-mentioned IC-card ciphertext through IC-card number checking and is authorized sign Purchase Token to be sent to BackOffice equipment and carry out verification.

The embodiment of the invention is follow-up will discuss BackOffice equipment to IC-card number IC-card ciphertext that the checking request is carried and the concrete implementation procedure of authorizing sign Purchase Token to carry out verification from the angle of BackOffice equipment in detail through specific embodiment.

13), CDN equipment receives and storage BackOffice equipment sends verification is through the result, this verification comprises IC-card plaintext and decruption key through the result.

Wherein, above-mentioned decruption key can be STB when registering one's residence and BackOffice equipment appoint.

14), CDN equipment with the pushing video streaming of program request to STB.

As a kind of optional execution mode; If the BackOffice equipment IC-card ciphertext that number checking asks to carry to IC-card is carried out the verification failure with mandate sign Purchase Token; CDN equipment can also receive BackOffice equipment and send the verification failed message so; And send and create the on-demand session failed message to STB, promptly do not allow STB to create on-demand session, make STB can't realize that VOD is professional.

In the embodiment of the invention one; CDN equipment can receive the heartbeat message that carries the IC-card ciphertext that STB sends in real time; And from heartbeat message, obtain the IC-card ciphertext; And the decruption key that utilizes storage deciphers obtaining the IC-card plaintext this IC-card ciphertext, and when the IC-card plaintext that obtains in deciphering be sky, the pushing video streaming that CDN equipment can stop program request being looked was to STB.Through this scheme; CDN equipment can be deciphered through the IC-card ciphertext that heartbeat message sends in real time STB in the broadcast stage; When the IC-card that obtains when deciphering number expressly is sky, explain that then IC-card transferred to STB, the pushing video streaming that CDN equipment can stop program request being looked is to STB.Whether the embodiment of the invention one inserts STB by CDN Equipment Inspection IC, if not, forbids that then STB realizes that VOD is professional.Compare with the mode whether existing STB detection IC-card exists, the embodiment of the invention one can prevent effectively that simultaneously shared same the IC-cards realization of a plurality of STB VOD is professional, reduces the income loss of television operator.

Embodiment two:

See also Fig. 2, the flow chart of a kind of video-on-demand control method that Fig. 2 provides for the embodiment of the invention two.Wherein, the embodiment of the invention two discusses in detail the video-on-demand control method that the embodiment of the invention provides from the angle of BackOffice equipment.As shown in Figure 2, this VOD method can may further comprise the steps:

201, BackOffice equipment receives the IC-card number checking request that CDN equipment sends, and carries the IC-card ciphertext in number checking request of this IC-card and authorizes sign Purchase Token.

202, the decruption key of BackOffice equipment utilization storage is deciphered the IC-card IC-card ciphertext that number the checking request is carried, to obtain the IC-card plaintext.

203, if the IC-card plaintext of deciphering acquisition is empty, then BackOffice equipment sends the verification failed message to CDN equipment, triggers CDN equipment and sends establishment on-demand session failed message to STB.

As a kind of optional execution mode; If the IC-card plaintext that the decruption key of BackOffice equipment utilization storage is deciphered acquisition to the IC-card IC-card ciphertext that number the checking request is carried in the above-mentioned steps 202 is for empty; Whether BackOffice equipment can further be inquired about and store in its Purchase Token cache table and the identical target P urchase Token of mandate sign Purchase Token that deciphers acquisition so; If have, then from Purchase Token cache table, obtain the corresponding IC-card plaintext of target P urchase Token; And when the IC-card number plaintext that the IC-card plaintext that obtains in deciphering and target P urchase Token are corresponding is consistent; BackOffice equipment can send verification and pass through the result to CDN equipment; Trigger CDN equipment with the pushing video streaming of program request to STB, this verification comprises IC-card plaintext and decruption key through the result.

Correspondingly; If going out, the BackOffice equipment query do not store in its Purchase Token cache table and the identical target P urchase Token of mandate sign Purchase Token that deciphers acquisition; Then BackOffice equipment can send the verification failed message to CDN equipment; Trigger CDN and be equipped with transmission establishment on-demand session failed message, thereby do not allow STB to create on-demand session, make STB can't realize that VOD is professional to STB.

Perhaps; If going out, the BackOffice equipment query stores in its Purchase Token cache table and the identical target P urchase Token of mandate sign Purchase Token that deciphers acquisition; But the IC-card plaintext that the IC-card plaintext that deciphering obtains is corresponding with target P urchase Token is inconsistent; Then BackOffice equipment also can send the verification failed message to CDN equipment; Trigger CDN equipment and send establishment on-demand session failed message, thereby do not allow STB to create on-demand session, make STB can't realize that VOD is professional to STB.

As a kind of optional execution mode, in the video-on-demand control method that the embodiment of the invention two provides, BackOffice equipment can also be carried out following steps before carrying out above-mentioned steps 201:

21), BackOffice equipment receives STB by the program authorization requests of sending through EPG equipment, carries the column numbering at IC-card ciphertext, program identification (ID) and program place in this program authorization requests at least.

22), the decruption key of BackOffice equipment utilization storage IC-card ciphertext that the program authorization requests is carried deciphers, to obtain the IC-card plaintext.

23), BackOffice equipment will compare the IC-card plaintext that the IC-card ciphertext that the program authorization requests is carried deciphered the IC-card plaintext of acquisition and storage in advance, if contrast is consistent, then generates and authorize sign Purchase Token.

Wherein, the IC-card plaintext that BackOffice equipment is stored in advance generally is STB when registering one's residence, and on BackOffice equipment, stores in advance.

24), BackOffice equipment is set up the corresponding relation that mandate sign Purchase Token that generates and the IC-card ciphertext that the program authorization requests is carried are deciphered the IC-card plaintext of acquisition, and this corresponding relation is stored in its Purchase Token cache table.

Wherein, the Purchase Token cache table on the BackOffice equipment can be as shown in table 1.

Purchase Token cache table on the table 1 BackOffice equipment

As shown in table 1; Stored the corresponding relation of 20110203123625001256 a9748cbdbea that obtain with deciphering that generate in the Purchase Token cache table, and the corresponding relation of having stored 20110203123625001257 a9748cbdbeb that obtain with deciphering that generate.

25), the BackOffice equipment mandate sign Purchase Token that will generate sends to EPG equipment, trigger EPG equipment and will authorize sign Purchase Token and broadcast URL to be handed down to STB.

As a kind of optional execution mode, BackOmce equipment can also carry out overtime control to each the Purchase Token that stores in the Purchase Token cache table.For example whether the BackOffice equipment holding time that can detect each the Purchase Token that stores in the Purchase Token cache table surpasses separately preset life cycle (unit for minute or second); If then the deletion holding time surpasses the Purchase Token of preset life cycle and the IC-card plaintext of correspondence thereof from Purchase Token cache table; Otherwise, then do not delete.

As a kind of optional execution mode; If BackOffice equipment is through above-mentioned steps 22) the IC-card plaintext that obtains of deciphering be sky; Explain that then IC-card has been pulled out STB in authorization stages; Then BackOffice equipment can issue program authorization failure message and give EPG equipment, triggers EPG equipment program authorization failure message is handed down to STB.Be that BackOffice equipment can detect IC-card at authorization stages and has been pulled out STB, make STB can't realize that VOD is professional, thereby can prevent effectively that simultaneously shared same the IC-cards of a plurality of STB from realizing that VOD is professional, the income that reduces television operator runs off.

Perhaps; If BackOffice equipment is through above-mentioned steps 22) the IC-card plaintext that obtains of deciphering be sky; But in step 23) in contrast the IC-card plaintext of IC-card plaintext that deciphering obtains and storage in advance when inconsistent; Explain that then the IC-card identity is illegal in authorization stages, then BackOffice equipment can issue program authorization failure message and give EPG equipment, triggers EPG equipment program authorization failure message is handed down to STB.It is illegal to be that BackOffice equipment can detect IC-card at authorization stages, makes STB can't realize that VOD is professional.Wherein, whether legal detect IC-card mode by BackOffice equipment at authorization stages safer, reliable, make illegal STB or software terminal be not easy identification, thereby the income that can reduce television operator runs off.

As a kind of optional execution mode, in the video-on-demand control method that the embodiment of the invention two provides, BackOffice equipment is being carried out above-mentioned steps 21) before, can also carry out following steps:

211), BackOffice equipment receives the authentication request that carries the STB parameters for authentication that EPG equipment sends, this STB parameters for authentication comprises Mac address, STB version number and the set top box decodes ability of IC-card ciphertext, STB at least.

Wherein, above-mentioned authentication request is that EPG equipment receives after the EPG homepage access request that carries above-mentioned STB parameters for authentication that STB sends, and redispatches to BackOffice equipment.

212), the decruption key of BackOffice equipment utilization storage deciphers the IC-card ciphertext that the STB parameters for authentication comprises, to obtain the IC-card plaintext.

213), BackOffice equipment will to the IC-card ciphertext that the STB parameters for authentication comprises decipher the IC-card plaintext of acquisition with in advance the storage the IC-card plaintext compare; If contrast is consistent; Send authentication and pass through the result, trigger EPG equipment generation EPG homepage and also send to the STB displaying to EPG equipment.

As a kind of optional execution mode; If BackOffice equipment is through above-mentioned steps 212) the IC-card plaintext that obtains of deciphering be sky; Explain that then IC-card has been pulled out STB in authentication phase; BackOffice equipment can issue authentification failure message to EPG equipment, triggers EPG equipment and issues EPG homepage visit failed message to STB.Be that BackOffice equipment can detect IC-card in authentication phase and has been pulled out STB, make STB can't realize that VOD is professional, thereby can prevent effectively that simultaneously shared same the IC-cards of a plurality of STB from realizing that VOD is professional, the income that reduces television operator runs off.

Perhaps; If BackOffice equipment is through above-mentioned steps 212) the IC-card plaintext that obtains of deciphering be sky; But in step 213) in contrast the IC-card plaintext of IC-card plaintext that deciphering obtains and storage in advance when inconsistent; Explain that then the IC-card identity is illegal in authentication phase, BackOffice equipment can issue authentification failure message to EPG equipment, triggers EPG equipment and issues EPG homepage visit failed message to STB.Wherein, whether legal detect IC-card mode by BackOffice equipment in authentication phase safer, reliable, make illegal STB or software terminal be not easy identification, thereby the income that can reduce television operator runs off.

Whether the embodiment of the invention two inserts STB by BackOffice Equipment Inspection IC, if not, forbids that then STB realizes that VOD is professional.Compare with the mode whether existing STB detection IC-card exists, the embodiment of the invention can prevent effectively that simultaneously shared same the IC-cards realization of a plurality of STB VOD is professional, reduces the income loss of television operator.

Embodiment three:

See also Fig. 3, the flow chart of a kind of video-on-demand control method that Fig. 3 provides for the embodiment of the invention three.Wherein, the embodiment of the invention three discusses in detail the video-on-demand control method that the embodiment of the invention provides from the angle of STB.As shown in Figure 3, this VOD method can may further comprise the steps:

301, STB send carry the IC-card ciphertext heartbeat message to CDN equipment so that CDN equipment deciphers obtaining the IC-card plaintext this IC-card ciphertext, and the IC-card plaintext that obtains in deciphering stops pushing video streaming with program request when empty to STB.

302, STB detects the video flowing of whether receiving that CDN equipment pushes, if not, then points out the user to insert IC-card.

For instance, whether STB detects in Preset Time (as 5 seconds) and receives the video flowing that CDN equipment pushes, and if not, then points out the user to insert IC-card.

As a kind of optional execution mode, in the video-on-demand control method that the embodiment of the invention three provides, STB can also carry out following steps before carrying out above-mentioned steps 301:

31), STB sends the establishment on-demand session request that carries the IC-card ciphertext and authorize sign Purchase Token to CDN equipment to play URL, trigger CDN equipment through IC-card number checking request with this IC-card ciphertext with authorize sign Purchase Token to be sent to BackOffice equipment to carry out verification.

32) STB receives the video flowing that CDN equipment pushes, and this video flowing is decoded and play; Wherein, this video flowing is that CDN equipment receives the verification that BackOffice equipment sends and pushes through triggering behind the result, and this verification comprises IC-card plaintext and decruption key through the result.

As a kind of optional execution mode, STB is carrying out above-mentioned steps 31) afterwards, can also receive CDN equipment and send establishment on-demand session failed message, and the prompting user inserts IC-card; Wherein, above-mentioned establishment on-demand session failed message is that CDN equipment receives to trigger behind the verification failed message that BackOffice equipment sends and sends.Through this execution mode; BackOffice equipment can detect IC-card at the establishment session stage and be pulled out STB; Make STB can't realize that VOD is professional, can prevent effectively that simultaneously shared same the IC-card realization of a plurality of STB VOD is professional, the income that reduces television operator runs off; Perhaps through this execution mode, BackOffice equipment can to detect the IC-card identity illegal creating session stage, makes STB can't realize that VOD is professional, and the income that reduces television operator runs off.

As a kind of optional execution mode, in the video-on-demand control method that the embodiment of the invention three provides, STB is carrying out above-mentioned steps 31) before, can also carry out following steps:

311), STB is by sending the program authorization requests to BackOffice equipment through EPG equipment, carry the column numbering at IC-card ciphertext, program ID and program place in this program authorization requests at least.

312), STB receives mandate sign Purchase Token and the broadcast URL that EPG equipment issues; Wherein, This mandate sign Purchase Token is that the IC-card ciphertext that the decruption key of BackOffice equipment utilization storage carries the program authorization requests is deciphered, and the IC-card of the IC-card plaintext that obtains of deciphering and storage in advance generates and sends after number expressly consistent to EPG equipment.

As a kind of optional execution mode, STB is carrying out above-mentioned steps 311) afterwards, can also receive the program authorization failure message that EPG equipment issues, and the prompting user inserts IC-card; Wherein, Above-mentioned program authorization failure message is that the IC-card ciphertext that the decruption key of BackOffice equipment utilization storage carries the program authorization requests is deciphered; And when the IC-card plaintext that deciphering obtains is empty; Or the IC-card ciphertext that the decruption key of BackOffice equipment utilization storage carries the program authorization requests is deciphered; And when the IC-card plaintext of IC-card plaintext that deciphering obtains and storage in advance is inconsistent, issues program authorization failure message by BackOffice equipment and give EPG equipment and trigger EPG equipment and be handed down to STB's.Through this execution mode; BackOffice equipment can detect IC-card at authorization stages and be pulled out STB (i.e. the IC-card plaintext that deciphering obtains is for empty); Make STB can't realize that VOD is professional; Can prevent effectively that simultaneously shared same the IC-card realization of a plurality of STB VOD is professional, the income that reduces television operator runs off.Perhaps through this execution mode; BackOffice equipment can detect IC-card identity illegal (i.e. the IC-card plaintext that deciphering obtains is inconsistent with the IC-card plaintext of storage in advance) at authorization stages; Make STB can't realize that VOD is professional, the income that reduces television operator runs off.

As a kind of optional execution mode, in the video-on-demand control method that the embodiment of the invention three provides, STB is carrying out above-mentioned steps 311) before, can also carry out following steps:

3111), STB send carry the STB parameters for authentication EPG homepage access request to EPG equipment, trigger EPG equipment and through authentication request this STB parameters for authentication be sent to BackOffice equipment and carry out authentication; Wherein, this STB parameters for authentication comprises Mac address, STB version number and the set top box decodes ability of IC-card ciphertext, STB at least.

3112), STB receives and shows the EPG homepage of EPG equipment transmission; Wherein, This EPG homepage is that the decruption key of BackOffice equipment utilization storage is deciphered the IC-card ciphertext that the STB parameters for authentication comprises; And when the IC-card plaintext that deciphering obtains is consistent with the IC-card number plaintext of storage in advance; Send authentication by BackOffice equipment and pass through the result, trigger EPG equipment and generate and send to STB's to EPG equipment.

As a kind of optional execution mode, STB is carrying out above-mentioned steps 3111) afterwards, can also receive the EPG homepage visit failed message that EPG equipment issues, and the prompting user inserts IC-card; Wherein, Above-mentioned EPG homepage visit failed message is that the decruption key of BackOffice equipment utilization storage is deciphered the IC-card ciphertext that the STB parameters for authentication comprises; And when the IC-card plaintext that deciphering obtains is empty; Or the decruption key of BackOffice equipment utilization storage is deciphered the IC-card ciphertext that the STB parameters for authentication comprises; And when the IC-card plaintext of deciphering the IC-card plaintext of acquisition and storage in advance is inconsistent, issue authentification failure message to EPG equipment, trigger EPG equipment and be issued to STB's by BackOffice equipment.Through this execution mode; BackOffice equipment can detect IC-card in authentication phase and be pulled out STB (i.e. the IC-card plaintext that deciphering obtains is for empty); Make STB can't realize that VOD is professional; Can prevent effectively that simultaneously shared same the IC-card realization of a plurality of STB VOD is professional, the income that reduces television operator runs off.Perhaps through this execution mode; BackOffice equipment can detect IC-card identity illegal (i.e. the IC-card plaintext that deciphering obtains is inconsistent with the IC-card plaintext of storage in advance) in authentication phase; Make STB can't realize that VOD is professional, the income that reduces television operator runs off.

If the embodiment of the invention three can not, forbid that then STB realizes that VOD is professional by CDN or BackOffice Equipment Inspection IC insertion machine top box whether.Compare with the mode whether existing STB detection IC-card exists, the embodiment of the invention three can prevent effectively that simultaneously shared same the IC-cards realization of a plurality of STB VOD is professional, reduces the income loss of television operator.

Embodiment four:

See also Fig. 4, the flow chart of a kind of video-on-demand control method that Fig. 4 provides for the embodiment of the invention four.Wherein, the embodiment of the invention four discusses in detail the video-on-demand control method that the embodiment of the invention provides from the angle of STB, EPG equipment, CDN equipment and BackOffice equipment simultaneously.As shown in Figure 4, this VOD method can may further comprise the steps:

401, STB starting up.

402, the user selects to use VOD professional.

403, STB reads IC-card number in real time, and IC-card number is carried out encryption, to obtain the IC-card ciphertext.

Wherein, MD5 or the 3DES AES that STB can adopt agreement number carries out encryption to the IC-card that reads, to obtain the IC-card ciphertext.

404, STB sends EPG homepage access request to EPG equipment, and this EPG homepage access request can comprise following STB parameters for authentication: IC-card ciphertext, STB Mac address, STB version number and set top box decodes ability.

405, EPG equipment sends authentication request to BackOffice equipment, and this authentication request carries above-mentioned STB parameters for authentication.

406, BackOffice equipment carries out authentication processing; Be that the IC-card ciphertext that the decruption key of BackOffice equipment utilization storage comprises the STB parameters for authentication is deciphered to obtain the IC-card plaintext; If the IC-card plaintext that deciphering obtains is empty, it is not empty perhaps deciphering the IC-card plaintext that obtains, but the IC-card plaintext that deciphering obtains is inconsistent with the IC-card plaintext of storing in advance; Then execution in step 407, and process ends.If the IC-card plaintext of deciphering acquisition is not empty, and the IC-card plaintext that deciphering obtains is consistent with the IC-card number plaintext of storage in advance, and then execution in step 408.

407, BackOffice equipment issues program authorization failure message and gives said EPG equipment, triggers EPG equipment program authorization failure message is handed down to STB.

408, BackOffice equipment passes through the result to EPG equipment return authentication.

409, EPG equipment receives authentication that BackOffice equipment returns through the result, dynamically generates the EPG homepage.

410, EPG equipment returns the EPG homepage that generates to STB and shows.

411, the user browses the video frequency program of showing on the EPG homepage, selects video program play.

412, STB is in real time from reading IC-card number, and IC-card number is carried out encryption, to obtain the IC-card ciphertext.

413, STB sends the program authorization requests to EPG equipment, carries following parameter in this program authorization requests: the column numbering at program ID, IC-card ciphertext and program place.

414, EPG equipment is to this program authorization requests of BackOffice device forwards.

415, BackOffice equipment carries out authorisation process, i.e. the IC-card ciphertext that the decruption key of BackOffice equipment utilization storage carries the program authorization requests is deciphered to obtain the IC-card plaintext; If the IC-card plaintext that deciphering obtains is empty, it is not empty perhaps deciphering the IC-card plaintext that obtains, but the IC-card plaintext that deciphering obtains is inconsistent with the IC-card plaintext of storing in advance, and then execution in step 416.If the IC-card plaintext that deciphering obtains is not empty; And the IC-card plaintext that deciphering obtains is consistent with the IC-card number plaintext of storage in advance; Then BackOffice equipment generates to this program request of user and authorizes sign Purchase Token, and sets up the corresponding relation of the IC-card plaintext that the mandate sign Purchase Token that generates and deciphering obtain and store in its Purchase Token cache table; Execution in step 417.

In step 415; BackOffice equipment can also detect the holding time of each the Purchase Token that stores in the Purchase Token cache table, and from Purchase Token cache table, deletes Purchase Token and corresponding IC-card plaintext thereof that the holding time surpasses preset life cycle.

416, BackOffice equipment issues program authorization failure message and gives EPG equipment, and trigger EPG equipment program authorization failure message is handed down to STB, and process ends.

417, BackOffice equipment returns the program Authorization result to EPG equipment, and this Authorization result comprises the mandate sign Purchase Token of generation.

418, EPG equipment issues the program request parameter to STB, triggers STB and gets into the program request flow process, comprises in this program request parameter playing URL and authorizing sign Purchase Token.

419, STB is in real time from reading IC-card number, and IC-card number is carried out encryption, to obtain the IC-card ciphertext.

420, STB sends the on-demand session request of creating to play URL to CDN equipment, creates to carry the IC-card ciphertext in the on-demand session request and authorize sign Purchase Token.

Wherein, the embodiment of the invention can be expanded the request of existing establishment on-demand session, and increase can be carried the IC-card ciphertext and identified the PurchaseToken field with mandate in the establishment on-demand session request after the feasible expansion.Wherein, the existing extended mode of creating conversation request can be in two ways, mode one: in RTSP consensus standard header field, expand; Mode two: splice the IC-card ciphertext at the back and authorize sign PurchaseToken at RTSPURL.Wherein, mode one can be following with mode two concrete realizations:

Mode one

SETUP?rtsp://12.78.163.57/jb2.ts?RTSP/1.0

CSeq：2

Session：374299253

ICCARD：a9748cbdbea

Purchase?Token：20110203123625001256

Transport：MP2T/UDP；unicast；mode＝″PLAY″；destination＝12.78.163.157；client_port＝3853-3854

User-Agent：SUMA?SZ1771RTSP?1.0

Mode two

SETUP?rtsp://12.78.163.57/jb2.ts?ICCARD＝a9748cbdbea&PurchaseToken＝20110203123625001256RTSP/1.0

CSeq：2

Session：374299253

User-Agent：SUMA?SZ1771RTSP?1.0

421, CDN equipment sends the IC-card check request to BackOffice equipment, carries the IC-card ciphertext in the IC-card check request and authorizes sign Purchase Token.

422, BackOffice equipment carries out checking treatment, i.e. the IC-card ciphertext that the decruption key of BackOffice equipment utilization storage carries the IC-card check request is deciphered to obtain the IC-card plaintext; If the IC-card plaintext that deciphering obtains is not empty; And inquire and store in the Purchase Token cache table and the identical target P urchase Token of mandate sign Purchase Token that deciphers acquisition; Then from Purchase Token cache table, obtain the corresponding IC-card plaintext of target P urchase Token, and execution in step 424; If it is empty that deciphering obtains the IC-card plaintext; Perhaps the IC-card plaintext of deciphering acquisition is not empty; But do not store in the Purchase Token cache table and the identical target P urchase Token of mandate sign Purchase Token that deciphers acquisition; Perhaps the IC-card plaintext of deciphering acquisition is not empty; And store and decipher the identical target P urchase Token of mandate sign Purchase Token of acquisition in the Purchase Token cache table, but the IC-card plaintext that deciphering the obtains IC-card plaintext corresponding with target P urchase Token is inconsistent, then BackOffice equipment execution in step 423.

423, BackOffice equipment sends the verification failed message to CDN equipment, triggers CDN equipment and sends establishment on-demand session failed message to STB, process ends.

424, BackOffice equipment back-checking is given CDN equipment through the result, and verification comprises IC-card plaintext and decruption key through the result; CDN is saved in IC-card plaintext and decruption key in the on-demand session.

425, after the conversation establishing success, CDN pushes the video flowing of program request through Cable or IP network to STB, is decoded and is play by STB.

426, STB is in real time from reading IC-card number, and IC-card number is carried out encryption, to obtain the IC-card ciphertext.

427, STB periodically sends heartbeat message to CDN equipment, and heartbeat message carries the IC-card ciphertext.

428, CDN equipment carries out checking treatment, and promptly CDN equipment obtains the IC-card ciphertext from heartbeat message, and utilizes the decruption key of storage that the IC-card ciphertext is deciphered to obtain the IC-card plaintext; If the IC-card plaintext that deciphering obtains be empty, and the IC-card number plaintext of the IC-card plaintext that obtains of deciphering and storage in advance is consistent, and then the continuation of CDN equipment to STB, and is waited for next heart beat cycle with the pushing video streaming of program request; If the IC-card plaintext that deciphering obtains be empty, but IC-card plaintext that deciphering obtains and the IC-card plaintext stored in advance are inconsistent, and then CDN equipment stops pushing video streaming with program request to STB.

If the embodiment of the invention four can not, forbid that then STB realizes that VOD is professional by CDN or BackOffice Equipment Inspection IC insertion machine top box whether.Compare with the mode whether existing STB detection IC-card exists, the embodiment of the invention four can prevent effectively that simultaneously shared same the IC-cards realization of a plurality of STB VOD is professional, reduces the income loss of television operator.

Embodiment five:

See also Fig. 5, the structure chart of a kind of CDN equipment that Fig. 5 provides for the embodiment of the invention five.As shown in Figure 5, this CDN equipment can comprise:

Transmit-Receive Unit 501 is used to receive the heartbeat message that STB sends, and carries the IC-card ciphertext in this heartbeat message.

Acquiring unit 502 is used for obtaining the IC-card ciphertext from heartbeat message.

Decryption unit 503 is used to utilize the decruption key of storage that the IC-card ciphertext is deciphered to obtain the IC-card plaintext.

Video flowing Dispatching Unit 504, the IC-card plaintext that is used for obtaining in deciphering stop pushing video streaming with program request to STB when empty.

Please consult Fig. 6, the structure chart of the another kind of CDN equipment that Fig. 6 provides for the embodiment of the invention five in the lump.With CDN apparatus in comparison shown in Figure 5, CDN equipment shown in Figure 6 can also comprise verification unit 505 and report unit 506:

Wherein, Verification unit 505, when the IC-card plaintext that is used for obtaining in deciphering was not empty, whether the IC-card plaintext that the contrast deciphering obtains was consistent with the IC-card plaintext of storing in advance; If consistent, then notify video flowing Dispatching Unit 504 with the pushing video streaming of program request to STB; If inconsistent, then notify video flowing Dispatching Unit 504 to stop pushing video streaming with program request to STB.

Correspondingly, video flowing Dispatching Unit 504 also is used for according to the notice of verification unit 505 pushing video streaming of program request to STB, or stops pushing video streaming with program request to STB.

In CDN equipment shown in Figure 6, Transmit-Receive Unit 501 can also receive STB to play the establishment on-demand session request that URL sends, and carries the IC-card ciphertext in the request of said establishment on-demand session and authorizes sign Purchase Token;

Correspondingly, report unit 506 to be used for this IC-card ciphertext being sent to BackOffice equipment with mandate sign Purchase Token and carry out verification through IC-card number checking request; And receiving and store BackOffice equipment transmission verification through the result, this verification comprises IC-card plaintext and decruption key through the result.

Correspondingly, video flowing Dispatching Unit 504 also is used for reporting unit 506 to receive verification that BackOffice equipment sends through after the result, with the pushing video streaming of program request to STB.

As a kind of optional execution mode, report unit 506 also to be used to receive the verification failed message of BackOffice equipment transmission and notify Transmit-Receive Unit 501.

Correspondingly, Transmit-Receive Unit 501 also is used for sending establishment on-demand session failed message to STB according to the notice that reports unit 501.

Whether the embodiment of the invention five can insert STB by CDN Equipment Inspection IC, if not, forbids that then STB realizes that VOD is professional.Compare with the mode whether existing STB detection IC-card exists, the embodiment of the invention five can prevent effectively that simultaneously shared same the IC-cards realization of a plurality of STB VOD is professional, reduces the income loss of television operator.

Embodiment six:

See also Fig. 7, the structure chart of a kind of BackOffice equipment that Fig. 7 provides for the embodiment of the invention six.As shown in Figure 7, this BackOffice equipment can comprise:

Receiving element 701 is used to receive the IC-card number checking request that CDN equipment sends, and carries the IC-card ciphertext in number checking request of this IC-card and authorizes sign Purchase Token.

Decryption unit 702 is used to utilize the decruption key IC-card ciphertext that number checking asks to carry to above-mentioned IC-card of storage to decipher to obtain the IC-card plaintext.

Control unit 703 when the IC-card plaintext that is used for obtaining in decryption unit 702 deciphering is empty, sends the verification failed message to CDN equipment, triggers CDN equipment and sends establishment on-demand session failed message to STB.

Please consult Fig. 8, the structure chart of the another kind of BackOffice equipment that Fig. 8 provides for the embodiment of the invention six in the lump.With BackOffice apparatus in comparison shown in Figure 7, BackOffice equipment shown in Figure 8 can also comprise:

Query unit 704; Be used for when the IC-card plaintext that decryption unit 702 deciphering obtain is not sky; Whether store in the inquiry Purchase Token cache table and the identical target P urchase Token of mandate sign Purchase Token that deciphers acquisition; If have, then from Purchase Token cache table, obtain the corresponding IC-card plaintext of target P urchase Token.

Whether verification unit 705, it is consistent to be used to contrast the corresponding IC-card plaintext of IC-card plaintext that decryption unit 702 deciphering obtain and target P urchase Token.

Wherein, Control unit 703 also is used for contrasting the corresponding IC-card of IC-card plaintext that decryption unit separates 702 close acquisitions and target P urchase Token when number expressly consistent in verification unit 705; Send verification and pass through the result to CND equipment; Trigger CND equipment with the pushing video streaming of program request to STB, this verification comprises IC-card plaintext and decruption key through the result.

As a kind of optional execution mode; Control unit 703 also is used for inquiring Purchase Token cache table in query unit 704 and does not store and the identical target P urchase Token of mandate sign Purchase Token that deciphers acquisition; Perhaps contrast IC-card plaintext that decryption unit 702 deciphering the obtains IC-card plaintext corresponding when inconsistent with target P urchase Token in verification unit 705; Send the verification failed message to CDN equipment, trigger CDN equipment and send establishment on-demand session failed message to STB.

Please consult Fig. 9, the structure chart of the another kind of BackOffice equipment that Fig. 9 provides for the embodiment of the invention six in the lump.With BackOffice apparatus in comparison shown in Figure 8, BackOffice equipment shown in Figure 9 can also comprise authorizes identify unit 706 and overtime control unit 707.In BackOffice equipment shown in Figure 9, receiving element 701 can also be used to receive STB by the program authorization requests of sending through EPG equipment, carries the column numbering at IC-card ciphertext, program identification and program place in this program authorization requests at least; Correspondingly, the decryption unit 702 IC-card ciphertext that also is used to utilize the decruption key of storage that the program authorization requests is carried is deciphered to obtain the IC-card plaintext; Whether verification unit 705 also is used to contrast the IC-card plaintext that IC-card ciphertext that decryption unit 702 deciphering program authorization requests carry obtains consistent with the IC-card plaintext of storage in advance; Authorize identify unit 706 to be used for contrasting the IC-card of IC-card plaintext that IC-card ciphertext that decryption unit 702 deciphering program authorization requests carry obtains and storage in advance when number expressly consistent, generate to authorize and identify Purchase Token in verification unit 705; And set up the corresponding relation of the IC-card plaintext of the mandate sign Purchase Token of generation and the IC-card ciphertext acquisition that decryption unit 702 deciphering program authorization requests are carried, and this corresponding relation is stored in its Purchase Token cache table.

Wherein, control unit 703 also is used for the mandate sign Purchase Token that authorizes identify unit 706 to generate is sent to EPG equipment, and triggering EPG equipment will be authorized sign Purchase Token and play URL and is handed down to STB.

Overtime control unit 707; Whether the holding time that is used for detecting each Purchase Token that the Purchase Token cache table of authorizing identify unit 706 stores surpasses preset life cycle separately; If then the deletion holding time surpasses the Purchase Token of preset life cycle and the IC-card plaintext of correspondence thereof from Purchase Token cache table.

As a kind of optional execution mode; Control unit 703 also is used for deciphering in the IC-card ciphertext that decryption unit 702 utilizes the decruption key of storage that the program authorization requests is carried; And when the IC-card plaintext that deciphering obtains is empty; Perhaps contrast the IC-card plaintext of IC-card plaintext that decryption unit 702 deciphering obtains and storage in advance when inconsistent, issue program authorization failure message and give EPG equipment, trigger EPG equipment program authorization failure message is handed down to STB in verification unit 705.

As a kind of optional execution mode; Receiving element 701 also is used to receive the authentication request that carries the STB parameters for authentication that EPG equipment sends, and the STB parameters for authentication comprises Mac address, STB version number and the set top box decodes ability of IC-card ciphertext, STB at least; Decryption unit 702 also is used to utilize the decruption key of storage that the IC-card ciphertext that the STB parameters for authentication comprises is deciphered, to obtain the IC-card plaintext; Verification unit 705 is used for that also the IC-card ciphertext that 702 pairs of STB parameters for authentication of decryption unit comprise is deciphered the IC-card plaintext of acquisition and compares with the IC-card plaintext of storing in advance; Control unit 703 also is used for contrasting IC-card ciphertext that 702 pairs of STB parameters for authentication of decryption unit comprise in verification unit 705 and deciphers the IC-card of the IC-card plaintext of acquisition and storage in advance when number expressly consistent; Send authentication and pass through the result, trigger EPG equipment generation EPG homepage and also send to the STB displaying to EPG equipment.

As a kind of optional execution mode; Control unit 703 also is used for utilizing the decruption key of storage that the IC-card ciphertext that the STB parameters for authentication comprises is deciphered in decryption unit 702; And when the IC-card plaintext that deciphering obtains is empty; Perhaps contrast IC-card ciphertext that 702 pairs of STB parameters for authentication of decryption unit comprise and decipher the IC-card plaintext of acquisition with the IC-card plaintext of storage in advance when inconsistent in verification unit 705; Issue authentification failure message to EPG equipment, trigger EPG equipment and issue EPG homepage visit failed message to STB.

Whether the embodiment of the invention six can insert STB by BackOffice Equipment Inspection IC, if not, forbids that then STB realizes that VOD is professional.Compare with the mode whether existing STB detection IC-card exists, the embodiment of the invention six can prevent effectively that simultaneously shared same the IC-cards realization of a plurality of STB VOD is professional, reduces the income loss of television operator.

Embodiment seven:

See also Figure 10, the structure chart of a kind of STB that Figure 10 provides for the embodiment of the invention seven.Shown in figure 10, this STB can comprise:

Transmit-Receive Unit 1001; Be used to send carry the IC-card ciphertext heartbeat message to CDN equipment; So that CDN equipment deciphers obtaining the IC-card plaintext the IC-card ciphertext, and stop order video stream is pushed to STB at IC-card plaintext (IC-card is pulled out STB) when empty.

Tip element 1002 is used to detect the video flowing whether Transmit-Receive Unit 1001 receives that CDN equipment pushes, and if not, then points out the user to insert IC-card.

As a kind of optional execution mode, the STB shown in 10 can also comprise decodes and plays unit 1003.Wherein, Transmit-Receive Unit 1001 also is used for sending and carrying IC-card ciphertext and the establishment on-demand session request of authorizing sign Purchase Token to CDN equipment to play URL, trigger CDN equipment through IC-card number checking request with the IC-card ciphertext with authorize sign Purchase Token to be sent to BackOffice equipment to carry out verification; And the video flowing that receives the propelling movement of CDN equipment; Wherein, this video flowing is that CDN equipment receives the verification that BackOffice equipment sends and pushes through triggering behind the result, and this verification comprises IC-card plaintext and decruption key through the result.Wherein, decodes and plays unit 1003 is used for the video flowing that Transmit-Receive Unit 1001 receives is decoded and play.

As a kind of optional execution mode, Transmit-Receive Unit 1001 also is used to receive the establishment on-demand session failed message that CDN equipment sends; Tip element 1002 also is used for when Transmit-Receive Unit 1001 receives the establishment on-demand session failed message of CDN equipment transmission, pointing out the user to insert IC-card; Wherein, creating the on-demand session failed message is that CDN equipment receives to trigger behind the verification failed message that BackOffice equipment sends and sends.

As a kind of optional execution mode, Transmit-Receive Unit 1001 also is used for carrying the column numbering at IC-card ciphertext, program identification and program place in this program authorization requests at least by sending the program authorization requests to BackOffice equipment through EPG equipment; And the mandate that reception EPG equipment issues identifies Purchase Token and plays URL; Wherein, authorizing sign Purchase Token is that the decruption key of BackOffice equipment utilization storage is deciphered the IC-card ciphertext, and the IC-card of the IC-card plaintext that obtains of deciphering and storage in advance generates and sends after number expressly consistent.

As a kind of optional execution mode, Transmit-Receive Unit 1001 also is used to receive the program authorization failure message that EPG equipment issues; Wherein, This program authorization failure message is that the decruption key of BackOffice equipment utilization storage is deciphered the IC-card ciphertext; And when the IC-card plaintext that deciphering obtains is empty (IC-card is pulled out STB); Or the decruption key of BackOffice equipment utilization storage deciphers the IC-card plaintext of acquisition with the IC-card plaintext of storage in advance when inconsistent (the IC-card identity is illegal) to the IC-card ciphertext, issues program authorization failure message by BackOffice equipment and gives EPG equipment and trigger that EPG equipment issues; Tip element 1002 also is used for when Transmit-Receive Unit 1001 receives the program authorization failure message that EPG equipment issues, and the prompting user inserts IC-card.

As a kind of optional execution mode, the STB shown in 10 can also comprise display unit 1004.Wherein, Transmit-Receive Unit 1001 also be used to send carry the STB parameters for authentication EPG homepage access request to EPG equipment, trigger EPG equipment and through authentication request the STB parameters for authentication be sent to BackOffice equipment and carry out authentication; This STB parameters for authentication comprises Mac address, STB version number and the set top box decodes ability of IC-card ciphertext, STB at least; And the EPG homepage that receives the transmission of EPG equipment; Wherein, The EPG homepage is that the decruption key of BackOffice equipment utilization storage is deciphered the IC-card ciphertext that the STB parameters for authentication comprises; And when the IC-card plaintext that deciphering obtains is consistent with the IC-card number plaintext of storage in advance; Send authentication by BackOffice equipment and pass through the result to EPG equipment, triggering EPG equipment generates and sends.Wherein, display unit 1004 is used to the EPG homepage of showing that Transmit-Receive Unit 1001 receives.

As a kind of optional execution mode; Transmit-Receive Unit 1001 also is used to receive the EPG homepage visit failed message that EPG equipment issues; Wherein, EPG homepage visit failed message is that the decruption key of BackOffice equipment utilization storage is deciphered the IC-card ciphertext, and the IC-card plaintext that obtains of deciphering is when be empty, or the decruption key of BackOffice equipment utilization storage is deciphered the IC-card plaintext of acquisition with the IC-card plaintext of storing in advance when inconsistent to the IC-card ciphertext; Issue authentification failure message to EPG equipment by BackOffice equipment, triggering EPG equipment issues; Tip element 1002 also is used for when Transmit-Receive Unit 1001 receives EPG homepage visit failed message, pointing out the user to insert IC-card.

Whether the embodiment of the invention seven can insert STB by CDN equipment or BackOffice Equipment Inspection IC, if not, forbids that then STB realizes that VOD is professional.Compare with the mode whether existing STB detection IC-card exists, the embodiment of the invention six can prevent effectively that simultaneously shared same the IC-cards realization of a plurality of STB VOD is professional, reduces the income loss of television operator.

Embodiment eight:

See also Figure 11, the structure chart of a kind of video request program control system that Figure 11 provides for the embodiment of the invention eight.Shown in figure 11, this video request program control system can comprise STB 1101 and content distributing network equipment 1102; Wherein:

STB 1101 is used to send heartbeat message to the content distributing network equipment 1102 that carries the IC-card ciphertext, and detects the video flowing of whether receiving that content distributing network equipment 1102 pushes, if not, then points out the user to insert IC-card.

Content distributing network establishes 1102, is used for the heartbeat message that receiving set up box 1101 sends, and from heartbeat message, obtains the IC-card ciphertext; And utilize the decruption key of storage that the IC-card ciphertext is deciphered, to obtain the IC-card plaintext; And when the IC-card plaintext is sky (IC-card is pulled out STB 1101), stop pushing video streaming to the STB 1101 that program request is looked.

As a kind of optional execution mode, video request program control system shown in Figure 11 can also comprise:

Backstage service management device 1103 is used for the IC-card number checking request that received content distributing network equipment 1102 sends, and the decruption key that utilizes storage is deciphered to obtain the IC-card plaintext the IC-card IC-card ciphertext that number the checking request is carried; And whether do not store the identical target P urchase Token of mandate sign Purchase Token that carries with IC-card number checking request in the inquiry Purchase Token cache table when empty at IC-card plaintext that deciphering obtains; If have, then from Purchase Token cache table, obtain the corresponding IC-card plaintext of target P urchase Token; And the corresponding IC-card of the IC-card plaintext that obtains in deciphering and target P urchase Token is when number expressly consistent, and the transmission verification is passed through the result to content distributing network equipment 1102, and verification comprises IC-card plaintext and decruption key through the result.Correspondingly; Content distributing network equipment 1102 also is used for the establishment on-demand session request that receiving set up box 1101 sends with broadcast URL, and asks that through IC-card number checking the IC-card ciphertext is sent to backstage service management device 1103 with mandate sign Purchase Token and carry out verification; And receive and verification that storage backstage service management device 1103 sends through the result, and with pushing video streaming to the STB 1101 of program request.Correspondingly, STB 1101 also is used for carrying the IC-card ciphertext and authorizing the establishment on-demand session request that identifies Purchase Token to content distributing network equipment 1102 to play the URL transmission; And the video flowing that pushes of received content distributing network equipment 1102, and video flowing decoded and play.

As a kind of optional execution mode, when the IC-card plaintext that backstage service management device 1103 also is used for obtaining in deciphering is empty, send the verification failed message to content distributing network equipment 1102; The IC-card plaintext that perhaps obtains in deciphering is not empty; And inquire when not storing the identical target P urchase Token of the mandate sign Purchase Token that carries with IC-card number checking request in the Purchase Token cache table, send the verification failed message to content distributing network equipment 1102; The IC-card plaintext that perhaps is used for obtaining in deciphering is not for empty; Store the identical target P urchase Token of mandate sign Purchase Token that carries with IC-card number checking request in the Purchase Token cache table and inquire; And when the IC-card plaintext that the IC-card plaintext that deciphering obtains is corresponding with target P urchase Token is inconsistent, send the verification failed message to content distributing network equipment 1102.Correspondingly, content distributing network equipment 1102 also is used to receive the verification failed message that backstage service management device 1103 sends, and sends and create the on-demand session failed message to STB 1101.Correspondingly, STB 1101 also is used for the establishment on-demand session failed message that received content distributing network equipment 1102 sends, and the prompting user inserts IC-card.

Electronic program guide (EPG) equipment 1104; Be used for the program authorization requests that receiving set up box 1101 sends; And this program authorization requests is sent to backstage service management device 1103, carry the column numbering at IC-card ciphertext, program identification and program place in this program authorization requests at least.Correspondingly, backstage service management device 1103 also is used to receive the program authorization requests that EPG equipment 1104 sends, and the IC-card ciphertext that the decruption key of utilization storage carries the program authorization requests is deciphered to obtain the IC-card plaintext; And will the IC-card plaintext that the IC-card ciphertext that the program authorization requests is carried deciphered the IC-card plaintext of acquisition and storage in advance be compared, if contrast is consistent, then generates and authorize sign Purchase Token; And the mandate that set up to generate sign Purchase Token and the described IC-card ciphertext that the program authorization requests is carried are deciphered the corresponding relation of the IC-card plaintext of acquisition; And said corresponding relation stored in its Purchase Token cache table, and the mandate that will generate sign Purchase Token sends to said EPG equipment 1104; EPG equipment 1104 also is used for said mandate sign Purchase Token and plays URL being handed down to said STB 1101; STB 1101 also is used to send said program authorization requests to said EPG equipment 1104, and receives said mandate sign Purchase Token and broadcast URL that said EPG equipment 1104 issues.

As a kind of optional execution mode; Backstage service management device 1103 also is used for deciphering in the IC-card ciphertext that the decruption key that utilizes storage carries said program authorization requests; And when the IC-card plaintext that deciphering obtains is empty, issues program authorization failure message and give said EPG equipment 1104; Perhaps, issue program authorization failure message and give said EPG equipment 1104 will the IC-card plaintext that the IC-card ciphertext that said program authorization requests is carried is deciphered the IC-card plaintext of acquisition and storage in advance being contrasted when inconsistent; Said EPG equipment 1104 also is used to receive the program authorization failure message that said backstage service management device 1103 issues, and said program authorization failure message is handed down to said STB 1101; Said STB 1101 also is used to receive the program authorization failure message that said EPG equipment 1104 issues, and the prompting user inserts IC-card.

As a kind of optional execution mode; Backstage service management device 1103 also is used to receive the authentication request that carries the STB parameters for authentication that EPG equipment 1104 sends, and said STB parameters for authentication comprises Mac address, STB version number and the set top box decodes ability of IC-card ciphertext, STB at least; And utilize the decruption key of storage that the IC-card ciphertext that said STB parameters for authentication comprises is deciphered, to obtain the IC-card plaintext; And will the IC-card plaintext that the IC-card ciphertext that said STB parameters for authentication comprises deciphered the IC-card plaintext of acquisition and storage in advance be compared, if contrast is consistent, then send authentication through the result to EPG equipment 1104; Said EPG equipment 1104 also is used to receive the EPG homepage access request that carries said STB parameters for authentication that said STB 1101 sends, and through authentication request said STB parameters for authentication is sent to said backstage service management device 1103 and carries out authentication; And the said authentication that receives 1103 transmissions of said backstage service management device generates the EPG homepage and also sends to STB 1101 through the result; Said STB 1101 also is used to send EPG homepage access request to the said EPG equipment 1104 that carries said STB parameters for authentication, and the EPG homepage that receives and show said EPG equipment 1104 transmissions.

As a kind of optional execution mode; Backstage service management device 1103 also is used at the decruption key that utilizes storage the IC-card ciphertext that said STB parameters for authentication comprises being deciphered; And the IC-card plaintext that obtains of deciphering issues extremely said EPG equipment 1104 of authentification failure message when be empty; Or the IC-card plaintext of in the IC-card ciphertext that said STB parameters for authentication is comprised, deciphering the IC-card plaintext of acquisition and storage in advance contrasts when inconsistent, issues authentification failure message to said EPG equipment 1104; Said EPG equipment 1104 also is used to receive the authentification failure message that said backstage service management device 1103 issues, and issues EPG homepage visit failed message to said STB 1101; Said STB 1101 also is used to receive the EPG homepage visit failed message that said EPG equipment 1104 issues, and the prompting user inserts IC-card.

In the embodiment of the invention, the structure of STB 1101, content distributing network equipment 1102 and backstage service management device 1103 has been carried out detailed introduction among the embodiment in front, and the embodiment of the invention is not repeated here.

Inventive embodiments eight can detect whether insertion machine top box 1101 of IC by content distributing network equipment 1102 or backstage service management device 1103, if not, forbids that then STB 1101 realizes that VOD are professional.Compare with the mode whether existing STB detection IC-card exists, the embodiment of the invention six can prevent effectively that simultaneously shared same the IC-cards realization of a plurality of STB VOD is professional, reduces the income loss of television operator.

The present invention does not limit for stream media protocol in the present invention, can be SIP, RTSP, SSP/LSCP etc.It need (be that service terminal can read IC-card number in real time as all service terminals of the means of service operation and charging by IC-card that the present invention can be applied to; In the key business flow process, IC-card number is reported the head end operation system then and carry out verification); It is professional to prevent that the user from using same IC-card on a plurality of service terminals, to use simultaneously simultaneously, prevents that the income of operator runs off.

One of ordinary skill in the art will appreciate that all or part of step in the whole bag of tricks of the foregoing description is to instruct relevant hardware to accomplish through program; This program can be stored in the computer-readable recording medium; Storage medium can comprise: flash disk, read-only memory (Read-Only Memory; ROM), random access device (Random Access Memory, RAM), disk or CD etc.

More than video-on-demand control method that the embodiment of the invention provided and relevant device, system have been carried out detailed introduction; Used concrete example among this paper principle of the present invention and execution mode are set forth, the explanation of above embodiment just is used for helping to understand method of the present invention and core concept thereof; Simultaneously, for one of ordinary skill in the art, according to thought of the present invention, the part that on embodiment and range of application, all can change, in sum, this description should not be construed as limitation of the present invention.

Claims

1. a video-on-demand control method is characterized in that, comprising:

Said content distributing network equipment obtains said IC-card ciphertext from said heartbeat message, and utilizes the decruption key of storage that said IC-card ciphertext is deciphered to obtain the IC-card plaintext;

2. method according to claim 1 is characterized in that, said method also comprises:

If said IC-card plaintext is not empty, whether then said content distributing network equipment contrasts said IC-card plaintext consistent with the IC-card plaintext of storage in advance, if consistent, then said content distributing network equipment is with pushing video streaming to the said STB of program request; If inconsistent, then said content distributing network equipment stops pushing video streaming to the said STB with program request.

3. method according to claim 1 and 2 is characterized in that, before the heartbeat message that content distributing network equipment receiving set up box sends, said method also comprises:

Content distributing network equipment receiving set up box carries the IC-card ciphertext and authorizes sign Purchase Token to play the establishment on-demand session request that URL sends in the request of said establishment on-demand session;

Said content distributing network equipment is sent to backstage service management BackOffice equipment with said IC-card ciphertext with mandate sign Purchase Token through IC-card number checking request and carries out verification;

Said content distributing network equipment receives and stores the verification of said BackOffice equipment transmission through the result, and said verification comprises IC-card plaintext and decruption key through the result;

Said content distributing network equipment is with pushing video streaming to the said STB of program request.

4. method according to claim 3 is characterized in that, said method also comprises:

Said content distributing network equipment receives said BackOffice equipment and sends the verification failed message, and sends and create on-demand session failed message to said STB.

5. a video-on-demand control method is characterized in that, comprising:

The decruption key of said BackOffice equipment utilization storage is deciphered to obtain the IC-card plaintext said IC-card ciphertext;

6. method according to claim 5 is characterized in that, said method also comprises:

If said IC-card plaintext is not empty; Whether store identical target P urchase Token in the then said BackOffice equipment query Purchase Token cache table with said mandate sign Purchase Token; If have, then from said Purchase Token cache table, obtain the corresponding IC-card plaintext of said target P urchase Token;

If the IC-card number plaintext that said IC-card plaintext and said target P urchase Token are corresponding is consistent; Then said BackOffice equipment sends verification and passes through the result to said content distributing network equipment; Trigger pushing video streaming to the said STB of said content distributing network equipment with program request, said verification comprises IC-card plaintext and decruption key through the result.

7. method according to claim 6 is characterized in that, said method also comprises:

If do not store identical target P urchase Token in the said Purchase Token cache table with said mandate sign Purchase Token; The IC-card plaintext that perhaps said IC-card plaintext is corresponding with said target P urchase Token is inconsistent; Then said BackOffice equipment sends verification failed message to said content distributing network equipment, triggers said content distributing network equipment and sends establishment on-demand session failed message to said STB.

8. according to claim 6 or 7 described methods, it is characterized in that before the IC-card number checking request that BackOffice equipment received content distributing network equipment sends, said method also comprises:

Said BackOffice equipment receiving set up box carries the column numbering at IC-card ciphertext, program identification and program place at least by the program authorization requests of sending through electronic program guides equipment in the said program authorization requests;

The IC-card ciphertext that the decruption key of said BackOffice equipment utilization storage carries said program authorization requests is deciphered to obtain the IC-card plaintext;

Said BackOffice equipment will be deciphered the IC-card plaintext of acquisition to the IC-card ciphertext that said program authorization requests is carried and compare with the IC-card plaintext of storing in advance, if contrast is consistent, then generate mandate sign Purchase Token;

Said BackOffice equipment is set up the mandate sign Purchase Token of generation and the corresponding relation that the described IC-card ciphertext that said program authorization requests is carried is deciphered the IC-card plaintext of acquisition, and said corresponding relation is stored in its Purchase Token cache table;

The mandate sign Purchase Token that said BackOffice equipment will generate sends to said electronic program guides equipment, triggers said electronic program guides equipment said mandate sign Purchase Token and broadcast URL are handed down to STB.

9. method according to claim 8 is characterized in that, said method also comprises:

Whether the holding time of each the Purchase Token that stores in the said Purchase Token of the said BackOffice Equipment Inspection cache table surpasses preset life cycle separately; If then the deletion holding time surpasses the Purchase Token of preset life cycle and the IC-card plaintext of correspondence thereof from said Purchase Token cache table.

10. method according to claim 8 is characterized in that, said method also comprises:

The IC-card plaintext of deciphering acquisition as if the IC-card ciphertext that said program authorization requests is carried is for empty; Perhaps deciphering the IC-card plaintext of acquisition as if the IC-card ciphertext that said program authorization requests is carried compares inconsistent with the IC-card plaintext of storing in advance; Then said BackOffice equipment issues program authorization failure message and gives said electronic program guides equipment, triggers said electronic program guides equipment program authorization failure message is handed down to said STB.

11. method according to claim 8 is characterized in that, before the program authorization requests that electronic program guides electronic program guides equipment sends, said method also comprises at BackOffice equipment receiving set up box:

Said BackOffice equipment receives the authentication request that carries the STB parameters for authentication that electronic program guides equipment sends, and said STB parameters for authentication comprises Mac address, STB version number and the set top box decodes ability of IC-card ciphertext, STB at least;

The IC-card ciphertext that the decruption key of said BackOffice equipment utilization storage comprises said STB parameters for authentication is deciphered to obtain the IC-card plaintext;

Said BackOffice equipment will be deciphered the IC-card plaintext of acquisition to the IC-card ciphertext that said STB parameters for authentication comprises and compare with the IC-card plaintext of storing in advance; If contrast is consistent; Send authentication and pass through the result, trigger said electronic program guides equipment and generate the electronic program guides homepage and send to the STB displaying to electronic program guides equipment.

12. method according to claim 11 is characterized in that, said method also comprises:

Be sky as if the IC-card plaintext of deciphering acquisition in the IC-card ciphertext that said STB parameters for authentication is comprised; Perhaps contrast inconsistent as if deciphering the IC-card plaintext of the IC-card plaintext of acquisition in the IC-card ciphertext that said STB parameters for authentication is comprised with storage in advance; Then said BackOffice equipment issues authentification failure message to said electronic program guides equipment, triggers said electronic program guides equipment and issues electronic program guides homepage visit failed message to said STB.

13. a video-on-demand control method is characterized in that, comprising:

14. method according to claim 13 is characterized in that, sends at STB before heartbeat message to the said content distributing network equipment that carries the IC-card ciphertext, said method also comprises:

STB sends and carries IC-card ciphertext and the establishment on-demand session request of authorizing sign Purchase Token to content distributing network equipment to play URL, trigger said content distributing network equipment through IC-card number checking request with said IC-card ciphertext with authorize sign Purchase Token to be sent to backstage service management BackOffice equipment to carry out verification;

Said STB receives the video flowing that said content distributing network equipment pushes, and said video flowing is decoded and play; Wherein, said video flowing is that said content distributing network equipment receives the verification that said BackOffice equipment sends and pushes through triggering behind the result, and said verification comprises IC-card plaintext and decruption key through the result.

15. method according to claim 14 is characterized in that, said method also comprises:

Said STB receives said content distributing network equipment and sends establishment on-demand session failed message, and the prompting user inserts IC-card; Wherein, said establishment on-demand session failed message is that said content distributing network equipment receives to trigger behind the verification failed message that said BackOffice equipment sends and sends.

16. according to claim 14 or 15 described methods; It is characterized in that; Send with the broadcast URL before establishment on-demand session request to the content distributing network equipment that carries IC-card ciphertext and mandate sign Purchase Token at STB, said method also comprises:

Said STB carries the column numbering at IC-card ciphertext, program identification and program place at least by sending the program authorization requests to BackOffice equipment through electronic program guides equipment in the said program authorization requests;

Said STB receives mandate sign Purchase Token and the broadcast URL that said electronic program guides equipment issues; Wherein, Said mandate sign Purchase Token is that the IC-card ciphertext that the decruption key of said BackOffice equipment utilization storage carries said program authorization requests is deciphered, and the IC-card of the IC-card plaintext that obtains of deciphering and storage in advance generates and sends after number expressly consistent to said electronic program guides equipment.

17. method according to claim 16 is characterized in that, said method also comprises:

Said STB receives the program authorization failure message that said EPG equipment issues, and the prompting user inserts IC-card; Wherein, Said program authorization failure message is that the IC-card ciphertext that the decruption key of said BackOffice equipment utilization storage carries said program authorization requests is deciphered; And when the IC-card plaintext that deciphering obtains is empty; Or the IC-card ciphertext that the decruption key of said BackOffice equipment utilization storage carries said program authorization requests is deciphered; And when the IC-card plaintext of IC-card plaintext that deciphering obtains and storage in advance is inconsistent, issues program authorization failure message by said BackOffice equipment and give said electronic program guides equipment and trigger said electronic program guides equipment and be handed down to said STB.

18. method according to claim 16 is characterized in that, by before sending program authorization requests to BackOffice equipment through electronic program guides equipment, said method also comprises at STB:

Said STB send carry the STB parameters for authentication electronic program guides homepage access request to electronic program guides equipment, trigger said electronic program guides equipment and through authentication request said STB parameters for authentication be sent to BackOffice equipment and carry out authentication; Said STB parameters for authentication comprises Mac address, STB version number and the set top box decodes ability of IC-card ciphertext, STB at least;

Said STB receives and shows the electronic program guides homepage of said electronic program guides equipment transmission; Wherein, Said electronic program guides homepage is that the decruption key of said BackOffice equipment utilization storage is deciphered the IC-card ciphertext that said STB parameters for authentication comprises; And when the IC-card plaintext that deciphering obtains is consistent with the IC-card number plaintext of storage in advance; By said BackOffice equipment send authentication through the result to electronic program guides equipment, trigger that said electronic program guides equipment generates and sends to STB.

19. method according to claim 18 is characterized in that, said method also comprises:

Said STB receives the electronic program guides homepage visit failed message that said electronic program guides equipment issues, and the prompting user inserts IC-card; Wherein, The decruption key that said electronic program guides homepage visit failed message is said BackOffice equipment utilization storage is deciphered the IC-card ciphertext that said STB parameters for authentication comprises; And when the IC-card plaintext that deciphering obtains is empty; Or the decruption key of said BackOffice equipment utilization storage is deciphered the IC-card ciphertext that said STB parameters for authentication comprises; And when the IC-card plaintext of IC-card plaintext that deciphering obtains and storage in advance is inconsistent, issue authentification failure message to said electronic program guides equipment, trigger said electronic program guides equipment and be issued to said STB by said BackOffice equipment.

20. a content distributing network equipment is characterized in that, comprising:

Decryption unit is used to utilize the decruption key of storage that said IC-card ciphertext is deciphered to obtain the IC-card plaintext;

21. content distributing network equipment according to claim 20 is characterized in that, also comprises:

Verification unit is used at said IC-card plaintext when empty, and whether contrast said IC-card plaintext consistent with the IC-card plaintext of storage in advance, if unanimity, then notifies said video flowing Dispatching Unit with the pushing video streaming of program request said STB extremely; If inconsistent, then notify said video flowing Dispatching Unit to stop pushing video streaming to said STB with program request;

Said video flowing Dispatching Unit also is used for according to the notice of said verification unit pushing video streaming to the said STB with program request, or stops pushing video streaming to the said STB with program request.

22. according to claim 20 or 21 described content distributing network equipment, it is characterized in that,

Said Transmit-Receive Unit also is used for receiving set up box to play the establishment on-demand session request that URL sends, and carries the IC-card ciphertext in the request of said establishment on-demand session and authorizes sign Purchase Token;

Said content distributing network equipment also comprises:

Report the unit, be used for said IC-card ciphertext being sent to backstage service management BackOffice equipment with mandate sign Purchase Token and carry out verification through IC-card number checking request; And receiving and store said BackOffice equipment transmission verification through the result, said verification comprises IC-card plaintext and decruption key through the result;

Said video flowing Dispatching Unit also is used for after the result is passed through in the said verification that reports the unit to receive said BackOffice equipment transmission, with pushing video streaming to the said STB of program request.

23. content distributing network equipment according to claim 22 is characterized in that,

The said unit that reports also is used to receive the verification failed message of said BackOffice equipment transmission and notify said Transmit-Receive Unit;

Said Transmit-Receive Unit also is used for sending establishment on-demand session failed message to said STB according to the said notice of unit that reports.

24. a backstage service management device is characterized in that, comprising:

25. backstage according to claim 24 service management device is characterized in that, also comprises:

Query unit; Be used for when the IC-card plaintext that said decryption unit deciphering obtains is not sky; Whether store with said mandate sign Purchase Token identical target P urchase Token in the inquiry Purchase Token cache table; If have, then from said Purchase Token cache table, obtain the corresponding IC-card plaintext of said target P urchase Token;

Verification unit, whether be used to contrast the corresponding IC-card plaintext of IC-card plaintext that said decryption unit deciphering obtains and said target P urchase Token consistent;

Said control unit; Also be used for contrasting the corresponding IC-card number plaintext of IC-card plaintext that the deciphering of said decryption unit obtains and said target P urchase Token when consistent in said verification unit; Send verification and pass through the result to said content distributing network equipment; Trigger pushing video streaming to the said STB of said content distributing network equipment with program request, said verification comprises IC-card plaintext and decruption key through the result.

26. backstage according to claim 25 service management device is characterized in that,

Said control unit; Also be used for inquiring said Purchase Token cache table and do not store identical target P urchase Token with said mandate sign Purchase Token in said query unit; Perhaps contrast IC-card plaintext that the deciphering of said decryption unit the obtains IC-card plaintext corresponding when inconsistent with said target P urchase Token in said verification unit; Send verification failed message to said content distributing network equipment, trigger said content distributing network equipment and send establishment on-demand session failed message to said STB.

27. according to claim 25 or 26 described backstage service management devices, it is characterized in that,

Said receiving element also is used for receiving set up box through the program authorization requests that electronic program guides equipment sends, and carries the column numbering at IC-card ciphertext, program identification and program place in the said program authorization requests at least;

Said decryption unit, the IC-card ciphertext that also is used to utilize the decruption key of storage that said program authorization requests is carried is deciphered to obtain the IC-card plaintext;

Said verification unit, whether also being used to contrast IC-card ciphertext that said decryption unit carries said program authorization requests, to decipher the IC-card plaintext of acquisition consistent with the IC-card plaintext of storage in advance;

Said backstage service management device also comprises:

Authorize identify unit; Be used for contrasting IC-card ciphertext that said decryption unit carries said program authorization requests and decipher the IC-card of the IC-card plaintext of acquisition and storage in advance when number expressly consistent, generate to authorize and identify Purchase Token in said verification unit; And set up the corresponding relation that the mandate that generates identifies the IC-card plaintext of Purchase Token and said decryption unit deciphering acquisition, and said corresponding relation is stored in its Purchase Token cache table;

Said control unit; The mandate sign Purchase Token that also is used for said mandate identify unit is generated sends to said electronic program guides equipment, triggers said electronic program guides equipment said mandate sign Purchase Token and broadcast URL are handed down to STB.

28. backstage according to claim 27 service management device is characterized in that, also comprises:

Overtime control unit; Whether the holding time that is used for detecting each Purchase Token that the Purchase Token cache table of said mandate identify unit stores surpasses preset life cycle separately; If then the deletion holding time surpasses the Purchase Token of preset life cycle and the IC-card plaintext of correspondence thereof from said Purchase Token cache table.

29. backstage according to claim 27 service management device is characterized in that,

Said control unit; Also be used for deciphering in the IC-card ciphertext that said decryption unit is carried said program authorization requests; And when the IC-card plaintext that deciphering obtains is empty; Perhaps contrast IC-card ciphertext that said decryption unit carries said program authorization requests and decipher the IC-card plaintext of the IC-card plaintext of acquisition and storage in advance when whether consistent in said verification unit; Issue program authorization failure message and give said electronic program guides equipment, trigger said electronic program guides equipment said program authorization failure message is handed down to STB.

30. backstage according to claim 27 service management device is characterized in that,

Said receiving element; Also be used to receive the authentication request that carries the STB parameters for authentication that electronic program guides equipment sends, said STB parameters for authentication comprises Mac address, STB version number and the set top box decodes ability of IC-card ciphertext, STB at least;

Said decryption unit also is used to utilize the decruption key of storage that the IC-card ciphertext that said STB parameters for authentication comprises is deciphered, to obtain the IC-card plaintext;

Said verification unit is used for that also the IC-card ciphertext that said decryption unit comprises said STB parameters for authentication is deciphered the IC-card plaintext of acquisition and compares with the IC-card plaintext of storing in advance;

Said control unit; Also be used for contrasting IC-card ciphertext that said decryption unit comprises said STB parameters for authentication and decipher the IC-card of the IC-card plaintext of acquisition and storage in advance when number expressly consistent in said verification unit; Send authentication and pass through the result, trigger said electronic program guides equipment and generate the electronic program guides homepage and send to the STB displaying to electronic program guides equipment.

31. backstage according to claim 30 service management device is characterized in that,

Said control unit; Also be used for the IC-card ciphertext that said STB parameters for authentication comprises being deciphered at the decruption key of said decryption unit utilization storage; And when the IC-card plaintext that deciphering obtains is empty; Perhaps contrast IC-card ciphertext that said decryption unit comprises said STB parameters for authentication and decipher the IC-card plaintext of acquisition with the IC-card plaintext of storage in advance when inconsistent in said verification unit; Issue authentification failure message to said electronic program guides equipment, trigger said electronic program guides equipment and issue electronic program guides homepage visit failed message to said STB.

32. a STB is characterized in that, comprising:

33. STB according to claim 32 is characterized in that,

Said Transmit-Receive Unit; Also be used for sending and carrying IC-card ciphertext and the establishment on-demand session request of authorizing sign Purchase Token to content distributing network equipment to play URL, trigger said content distributing network equipment through IC-card number checking request with said IC-card ciphertext with authorize sign Purchase Token to be sent to backstage service management BackOffice equipment to carry out verification; And the video flowing that receives said content distributing network equipment propelling movement; Wherein, said video flowing is that said content distributing network equipment receives the verification that said BackOffice equipment sends and pushes through triggering behind the result, and said verification comprises IC-card plaintext and decruption key through the result;

Said STB also comprises:

The decodes and plays unit is used for the video flowing that said Transmit-Receive Unit receives is decoded and play.

34. STB according to claim 33 is characterized in that,

Said Transmit-Receive Unit also is used to receive the establishment on-demand session failed message that said content distributing network equipment sends;

Said Tip element also is used for when said Transmit-Receive Unit receives the establishment on-demand session failed message of said content distributing network equipment transmission, pointing out the user to insert IC-card; Wherein, said establishment on-demand session failed message is that said content distributing network equipment receives to trigger behind the verification failed message that said BackOffice equipment sends and sends.

35. according to claim 33 or 34 described STBs, it is characterized in that,

Said Transmit-Receive Unit also is used for carrying the column numbering at IC-card ciphertext, program identification and program place in the said program authorization requests at least by sending the program authorization requests to BackOffice equipment through electronic program guides equipment; And receive the mandate sign Purchase Token that said electronic program guides equipment issues and play URL; Wherein, Said mandate sign Purchase Token is that the decruption key of said BackOffice equipment utilization storage is deciphered said IC-card ciphertext, and the IC-card of the IC-card plaintext that obtains of deciphering and storage in advance generates and sends after number expressly consistent.

36. STB according to claim 35 is characterized in that,

Said Transmit-Receive Unit also is used to receive the program authorization failure message that said electronic program guides equipment issues; Wherein, Said program authorization failure message is that the decruption key of said BackOffice equipment utilization storage is deciphered said IC-card ciphertext; And when the IC-card plaintext that deciphering obtains is empty; Or the decruption key of said BackOffice equipment utilization storage deciphers the IC-card plaintext of acquisition with the IC-card plaintext of storage in advance when inconsistent to said IC-card ciphertext, issues program authorization failure message by said BackOffice equipment and gives said electronic program guides equipment and trigger that said electronic program guides equipment issues;

Said Tip element also is used for when said Transmit-Receive Unit receives the program authorization failure message that said electronic program guides equipment issues, and the prompting user inserts IC-card.

37. STB according to claim 35 is characterized in that,

Said Transmit-Receive Unit; Also be used to send carry the STB parameters for authentication electronic program guides homepage access request to electronic program guides equipment, trigger said electronic program guides equipment and through authentication request said STB parameters for authentication be sent to BackOffice equipment and carry out authentication; Said STB parameters for authentication comprises Mac address, STB version number and the set top box decodes ability of IC-card ciphertext, STB at least; And the electronic program guides homepage that receives said electronic program guides equipment transmission; Wherein, Said electronic program guides homepage is that the decruption key of said BackOffice equipment utilization storage is deciphered the IC-card ciphertext that said STB parameters for authentication comprises; And when the IC-card plaintext that deciphering obtains is consistent with the IC-card number plaintext of storage in advance; By said BackOffice equipment send authentication through the result to electronic program guides equipment, trigger that said electronic program guides equipment generates and sends;

Said STB also comprises:

Display unit is used to the electronic program guides homepage of showing that said Transmit-Receive Unit receives.

38. according to the described STB of claim 37, it is characterized in that,

Said Transmit-Receive Unit; Also be used to receive the electronic program guides homepage visit failed message that said electronic program guides equipment issues; Wherein, Said electronic program guides homepage visit failed message is that said BackOffice equipment is deciphered the IC-card ciphertext that said STB parameters for authentication comprises; And when the IC-card plaintext that deciphering obtains is empty; Or said BackOffice equipment IC-card ciphertext that said STB parameters for authentication is comprised deciphers the IC-card plaintext of acquisition and when inconsistent, issues authentification failure message to said electronic program guides equipment by said BackOffice equipment with the IC-card plaintext of storage in advance, triggers that said electronic program guides equipment issues;

Said Tip element is used for also that the prompting user inserts IC-card when said Transmit-Receive Unit receives said electronic program guides homepage visit failed message.

39. a video request program control system is characterized in that, comprising:

Said content distributing network equipment is used to receive the heartbeat message that said STB sends, and from said heartbeat message, obtains said IC-card ciphertext; And utilize the decruption key of storage that said IC-card ciphertext is deciphered to obtain the IC-card plaintext; And when said IC-card plaintext is sky, stop pushing video streaming to the said STB that program request is looked.

40. according to the described video request program control system of claim 39, it is characterized in that, also comprise:

The backstage service management device is used to receive the IC-card number checking request that said content distributing network equipment sends, and the decruption key that utilizes storage is deciphered to obtain the IC-card plaintext the said IC-card IC-card ciphertext that number the checking request is carried; And whether do not store the identical target P urchase Token of mandate sign Purchase Token that carries with number checking request of said IC-card in the inquiry Purchase Token cache table when empty at said IC-card plaintext that deciphering obtains; If have, then from said Purchase Token cache table, obtain the corresponding IC-card plaintext of said target P urchase Token; And the corresponding IC-card of the IC-card plaintext that obtains in deciphering and said target P urchase Token sends verification and passes through extremely said content distributing network equipment of result when number expressly consistent, and said verification comprises IC-card plaintext and decruption key through the result;

Said content distributing network equipment; Also be used for the establishment on-demand session request that receiving set up box sends with the broadcast URL, and ask that through number checking of said IC-card said IC-card ciphertext is sent to said backstage service management device with mandate sign Purchase Token and carry out verification; And receive and store said verification that said backstage service management device sends, and with pushing video streaming to the said STB of program request through the result;

Said STB also is used for carrying said IC-card ciphertext and authorizing the establishment on-demand session request that identifies Purchase Token to content distributing network equipment to play the URL transmission; And receive the video flowing that said content distributing network equipment pushes, and said video flowing is decoded and play.

41. according to the described video request program control system of claim 40, it is characterized in that,

Said backstage service management device when the said IC-card plaintext that also is used for obtaining in deciphering is empty, sends verification failed message to said content distributing network equipment; The said IC-card plaintext that perhaps obtains in deciphering is not empty; And inquire when not storing the identical target P urchase Token of the mandate sign Purchase Token that carries with said IC-card number checking request in the said Purchase Token cache table, send verification failed message to said content distributing network equipment; The said IC-card plaintext that perhaps is used for obtaining in deciphering is not for empty; Store the identical target P urchase Token of mandate sign Purchase Token that carries with number checking request of said IC-card in the said Purchase Token cache table and inquire; And when the IC-card plaintext that the said IC-card plaintext that deciphering obtains is corresponding with said target P urchase Token is inconsistent, send verification failed message to said content distributing network equipment;

Said content distributing network equipment also is used to receive the verification failed message that said backstage service management device sends, and sends and create on-demand session failed message to said STB;

Said STB also be used to receive the establishment on-demand session failed message that said content distributing network equipment sends, and the prompting user inserts IC-card.

42. according to claim 40 or 41 described systems, it is characterized in that, also comprise:

Electronic program guides equipment; Be used to receive the program authorization requests that said STB sends; And said program authorization requests is sent to said backstage service management device, carry the column numbering at IC-card ciphertext, program identification and program place in the said program authorization requests at least;

Said backstage service management device also is used to receive the program authorization requests that said electronic program guides equipment sends, and the IC-card ciphertext that the decruption key of utilization storage carries said program authorization requests is deciphered to obtain the IC-card plaintext; And will the IC-card plaintext that the IC-card ciphertext that said program authorization requests is carried deciphered the IC-card plaintext of acquisition and storage in advance be compared, if contrast is consistent, then generates and authorize sign Purchase Token; And the mandate that set up to generate sign Purchase Token and the described IC-card ciphertext that said program authorization requests is carried are deciphered the corresponding relation of the IC-card plaintext of acquisition; And said corresponding relation stored in its Purchase Token cache table, and the mandate that will generate sign Purchase Token sends to said electronic program guides equipment;

Said electronic program guides equipment also is used for said mandate sign Purchase Token and plays URL being handed down to said STB;

Said STB also is used to send said program authorization requests to said electronic program guides equipment, and receives said mandate sign Purchase Token and broadcast URL that said electronic program guides equipment issues.

43. according to the described system of claim 42, it is characterized in that,

Said backstage service management device; Also be used for deciphering in the IC-card ciphertext that the decruption key that utilizes storage carries said program authorization requests; And when the IC-card plaintext that deciphering obtains is empty, issues program authorization failure message and give said electronic program guides equipment; Perhaps, issue program authorization failure message and give said electronic program guides equipment will the IC-card plaintext that the IC-card ciphertext that said program authorization requests is carried is deciphered the IC-card plaintext of acquisition and storage in advance being contrasted when inconsistent;

Said electronic program guides equipment also is used to receive the program authorization failure message that said backstage service management device issues, and said program authorization failure message is handed down to said STB;

Said STB also is used to receive the program authorization failure message that said electronic program guides equipment issues, and the prompting user inserts IC-card.

44. according to the described system of claim 42, it is characterized in that,

Said backstage service management device; Also be used to receive the authentication request that carries the STB parameters for authentication that electronic program guides equipment sends, said STB parameters for authentication comprises Mac address, STB version number and the set top box decodes ability of IC-card ciphertext, STB at least; And utilize the decruption key of storage that the IC-card ciphertext that said STB parameters for authentication comprises is deciphered, to obtain the IC-card plaintext; And will the IC-card plaintext that the IC-card ciphertext that said STB parameters for authentication comprises deciphered the IC-card plaintext of acquisition and storage in advance be compared, if contrast is consistent, then send authentication through the result to electronic program guides equipment;

Said electronic program guides equipment; Also be used to receive the electronic program guides homepage access request that carries said STB parameters for authentication that said STB sends, and through authentication request said STB parameters for authentication be sent to said backstage service management device and carry out authentication; And the said authentication that receives the service management device transmission of said backstage generates the electronic program guides homepage and also sends to STB through the result;

Said STB also is used to send electronic program guides homepage access request to the said electronic program guides equipment that carries said STB parameters for authentication, and the electronic program guides homepage that receives and show said electronic program guides equipment transmission.

45. according to the described system of claim 44, it is characterized in that,

Said backstage service management device; Also be used for the IC-card ciphertext that said STB parameters for authentication comprises being deciphered at the decruption key that utilizes storage; And the IC-card plaintext that obtains of deciphering issues extremely said electronic program guides equipment of authentification failure message when be empty; Or the IC-card plaintext of in the IC-card ciphertext that said STB parameters for authentication is comprised, deciphering the IC-card plaintext of acquisition and storage in advance contrasts when inconsistent, issues authentification failure message to said electronic program guides equipment;

Said electronic program guides equipment also is used to receive the authentification failure message that said backstage service management device issues, and issues electronic program guides homepage visit failed message to said STB;

Said STB also be used to receive the electronic program guides homepage visit failed message that said electronic program guides equipment issues, and the prompting user inserts IC-card.