[go: up one dir, main page]

CN101262454A - Method and system for publishing network digital media content - Google Patents

Method and system for publishing network digital media content Download PDF

Info

Publication number
CN101262454A
CN101262454A CNA2008101045856A CN200810104585A CN101262454A CN 101262454 A CN101262454 A CN 101262454A CN A2008101045856 A CNA2008101045856 A CN A2008101045856A CN 200810104585 A CN200810104585 A CN 200810104585A CN 101262454 A CN101262454 A CN 101262454A
Authority
CN
China
Prior art keywords
server
content
resource
publisher
node
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CNA2008101045856A
Other languages
Chinese (zh)
Inventor
白翔宇
李军
张珺
蒋海
刘靖
叶新铭
李忠诚
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Institute of Computing Technology of CAS
Original Assignee
Institute of Computing Technology of CAS
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Institute of Computing Technology of CAS filed Critical Institute of Computing Technology of CAS
Priority to CNA2008101045856A priority Critical patent/CN101262454A/en
Publication of CN101262454A publication Critical patent/CN101262454A/en
Pending legal-status Critical Current

Links

Images

Landscapes

  • Information Transfer Between Computers (AREA)

Abstract

本发明提供一种用于互联网络上的数字媒体内容进行发布的方法。包括如下步骤:将发布内容组织成内容资源包,向认证服务器提交内容发布请求报文;执行认证服务器根据内容发布请求报文选择资源服务器;返回被选中资源服务器信息和连接许可证给发布者;执行发布者使用连接许可证将内容资源包传递到被选中资源服务器。本方法提供了可靠且高效的内容发布方法,实现了系统负载动态平衡机制,降低了资源部署开销。

Figure 200810104585

The invention provides a method for distributing digital media content on the Internet. The method includes the following steps: organize the published content into a content resource package, submit a content publishing request message to the authentication server; execute the authentication server to select a resource server according to the content publishing request message; return the selected resource server information and connection license to the publisher; The execution publisher uses the connection license to deliver the content resource bundle to the selected resource server. The method provides a reliable and efficient method for publishing content, realizes a dynamic balance mechanism of system load, and reduces resource deployment overhead.

Figure 200810104585

Description

一种网络数字媒体内容发布方法和系统 Method and system for publishing network digital media content

技术领域 technical field

本发明涉及计算机互联通信领域,更进一步涉及一种在网络上进行数字媒体管理时实现内容发布的方法和系统。The invention relates to the field of computer interconnection communication, and further relates to a method and a system for realizing content release when digital media management is performed on the network.

背景技术 Background technique

数字媒体是指机构或个人在经营、生产过程中积累的、有价值的各种数字化的信息和内容,这些信息和内容可能以各种不同的格式进行存储,表现为文字、图形、图像、数据、影音、动画等多种形式。互联网的普及、宽带技术的发展为数字媒体网络化管理提供了条件,推动了数字媒体内容网络发行平台的产生。构建网络化的数字媒体服务,可以扩展数字媒体内容的传播范围,加快其传播速度,并提高资源的利用效率。数字媒体内容的提供商利用互联网来进行数字媒体的发行,不仅丰富了原有的销售渠道,拓展了消费用户群体,给消费者提供了更加便捷的数字内容获取途径,而且还可以结合数字版权保护技术,防止盗版,保障发行收益,具有很高的商业价值。内容发布是数字媒体内容管理的必要组成部分,由内容提供商使用,用来将其所拥有的数字媒体资源发布到网络中的内容服务器或服务器群中,以便数字内容分发系统向终端消费者提供服务。Digital media refers to all kinds of valuable digital information and content accumulated by organizations or individuals in the process of operation and production, which may be stored in various formats, expressed as text, graphics, images, data, etc. , video, animation and other forms. The popularity of the Internet and the development of broadband technology provide conditions for digital media network management and promote the emergence of digital media content network distribution platforms. The construction of networked digital media services can expand the scope of digital media content transmission, accelerate its transmission speed, and improve resource utilization efficiency. Providers of digital media content use the Internet to distribute digital media, which not only enriches the original sales channels, expands consumer groups, provides consumers with more convenient access to digital content, but also combines digital copyright protection Technology, prevent piracy, guarantee distribution income, and have high commercial value. Content publishing is a necessary part of digital media content management, used by content providers to publish their own digital media resources to content servers or server groups in the network, so that the digital content distribution system can provide end consumers with Serve.

现有的数字媒体内容发布结构基于客户端-服务器模式,在数字媒体资源中心架设资源服务器或服务器组。其基本步骤如下:内容提供商也就是发布者将待发布的媒体内容加入描述和控制信息组织成资源包,连接待部署的各资源服务器,请求上传资源;资源服务器与认证服务器通信,通过身份验证和授权后,允许发布者上传;发布者将资源包分别上传到指定的资源服务器中,供终端用户连接这些服务器下载资源。这种服务模式简单,易部署,便于管理,但是随着用户的增多,对媒体资源的需求也在成指数上升趋势,该模式逐渐显现出其劣势,如安全性差、单点瓶颈、资源下载速率慢、请求响应时间过长等。值得注意的是,在数字媒体内容管理中涉及的资源存储总量往往很庞大,通常分布存储在多个位置。针对不同的终端用户,提供的媒体内容访问服务也不尽相同。此外数字媒体内容的发布者可以来自不同的地理位置,具有不同的操作权限,在进行内容发布时,系统需要对发布者保持透明性,屏蔽实际的存储位置,并提供身份认证和授权以及资源传递加密的支持。目前的内容发布方法及系统无法满足上述的要求,限制了数字媒体网络发行业务的广泛开展。The existing digital media content distribution structure is based on the client-server model, and resource servers or server groups are set up in the digital media resource center. The basic steps are as follows: the content provider, that is, the publisher, adds the description and control information of the media content to be published into a resource package, connects to each resource server to be deployed, and requests to upload resources; the resource server communicates with the authentication server, and passes the identity verification After authorization and authorization, the publisher is allowed to upload; the publisher uploads the resource packages to the designated resource servers respectively, for end users to connect to these servers to download resources. This service model is simple, easy to deploy, and easy to manage. However, with the increase of users, the demand for media resources is also increasing exponentially. This model gradually shows its disadvantages, such as poor security, single-point bottlenecks, and resource download speed. Slow, request response time is too long, etc. It is worth noting that the total amount of resource storage involved in digital media content management is often huge, and is usually distributed and stored in multiple locations. Different media content access services are provided for different end users. In addition, publishers of digital media content can come from different geographical locations and have different operating permissions. When publishing content, the system needs to be transparent to publishers, shield the actual storage location, and provide identity authentication and authorization as well as resource delivery Encryption support. The current content release method and system cannot meet the above requirements, which limits the extensive development of digital media network distribution services.

发明内容 Contents of the invention

为了克服现有系统的不足,鉴于数字媒体网络发行业务的需要,本发明提出一种网络数字媒体内容发布方法和系统,防止资源信息被恶意篡改和冒充;同时还提高了发布效率,实现了快速的资源分布式部署。In order to overcome the deficiencies of the existing system, in view of the needs of digital media network publishing services, the present invention proposes a method and system for publishing digital media content on the network, which can prevent resource information from being maliciously tampered with and impersonated; at the same time, it also improves the publishing efficiency and realizes fast Distributed deployment of resources.

为实现上述目的,根据本发明的一个方面,提供了一种网络数字媒体内容发布方法,其包括如下步骤:In order to achieve the above object, according to one aspect of the present invention, a method for publishing network digital media content is provided, which includes the following steps:

1)将待发布内容组织成内容资源包,向认证服务器提交内容发布请求报文;1) Organize the content to be released into a content resource package, and submit a content release request message to the authentication server;

2)所述认证服务器根据所述内容发布请求报文选择资源服务器;2) The authentication server selects a resource server according to the content release request message;

3)所述认证服务器返回被选中资源服务器信息和连接许可证给发布者;3) The authentication server returns the selected resource server information and connection license to the publisher;

4)所述发布者使用所述连接许可证将所述内容资源包传递到所述被选中资源服务器。4) The publisher uses the connection license to deliver the content resource package to the selected resource server.

根据本发明的另一方面,上述网络数字媒体内容发布方法的所述步骤4)后包括步骤5)所述被选中资源服务器将所述内容资源包分发到指定端服务器。According to another aspect of the present invention, step 4) of the above-mentioned network digital media content distribution method includes step 5) that the selected resource server distributes the content resource package to the designated server.

根据本发明的又一方面,上述网络数字媒体内容发布方法的步骤5)采用端服务器分层并行分发方法,包括如下步骤:According to yet another aspect of the present invention, step 5) of the above-mentioned network digital media content publishing method adopts a layered parallel distribution method of an end server, including the following steps:

51)排列端服务器节点序列;51) arrange the end server node sequence;

52)按照所述节点序列,确定所述节点间的上下级关系;52) According to the node sequence, determine the superior-subordinate relationship between the nodes;

53)根据所述节点间的上下级关系建立端服务器逻辑层次树;53) Establishing a logical hierarchical tree of end servers according to the upper-lower relationship between the nodes;

54)根据所述端服务器逻辑层次树执行所述被选中资源服务器将所述内容资源包分发到所述指定端服务器。54) Executing the selected resource server to distribute the content resource package to the specified end server according to the end server logical hierarchy tree.

根据本发明的又一方面,上述网络数字媒体内容发布方法的步骤54)包括如下步骤:According to yet another aspect of the present invention, the step 54) of the above-mentioned network digital media content publishing method comprises the following steps:

541)执行所述被选中资源服务器根据所述内容资源包和所述端服务器逻辑层次树建立所述内容资源包的转发树;541) Executing the selected resource server to establish a forwarding tree of the content resource package according to the content resource package and the logical hierarchical tree of the end server;

542)执行传递所述资源包和所述转发树信息至所述被选中资源服务器的孩子节点;542) Execute delivering the resource package and the forwarding tree information to the child node of the selected resource server;

543)执行所述被选中资源服务器的孩子节点判断自己是否是所述转发树的叶子节点,如果是,则结束,否则执行步骤544);543) Execute the child node of the selected resource server to judge whether it is a leaf node of the forwarding tree, if yes, then end, otherwise, execute step 544);

544)根据所述转发树信息传递资源包和转发树信息至所述指定端服务器。544) Transfer the resource package and the forwarding tree information to the designated end server according to the forwarding tree information.

根据本发明的再一方面,上述网络数字媒体内容发布方法的步骤1)中所述内容发布请求报文包括发布者身份信息和发布请求信息。According to yet another aspect of the present invention, the content release request message in step 1) of the above-mentioned network digital media content release method includes publisher identity information and release request information.

根据本发明的再一方面,上述网络数字媒体内容发布方法的步骤2)包括根据所述发布者请求报文访问数据库服务器,获得发布者证书,从而检查发布者权限。According to yet another aspect of the present invention, the step 2) of the above-mentioned network digital media content publishing method includes accessing a database server according to the publisher request message to obtain a publisher's certificate, thereby checking the publisher's authority.

根据本发明的再一方面,上述网络数字媒体内容发布方法的步骤2)包括:According to another aspect of the present invention, step 2) of the above-mentioned network digital media content distribution method includes:

根据所述内容发布请求报文判断资源服务器是否可用;judging whether the resource server is available according to the content release request message;

从可用的资源服务器中根据处理能力、负载情况及网络带宽选择最优的资源服务器。Select the optimal resource server from the available resource servers according to the processing capacity, load conditions and network bandwidth.

根据本发明的再一方面,上述网络数字媒体内容发布方法的步骤3)中所述连接许可证是动态的。According to yet another aspect of the present invention, the connection license in step 3) of the above-mentioned network digital media content distribution method is dynamic.

根据本发明的又一方面,本发明还提供了一种网络数字媒体内容发布系统,所述发布系统包括发布者、认证服务器、资源服务器和数据库服务器,其中:According to yet another aspect of the present invention, the present invention also provides a network digital media content distribution system, the distribution system includes a publisher, an authentication server, a resource server and a database server, wherein:

所述发布者用于将待发布内容组织成内容资源包,提交内容发布请求报文至认证服务器,使用连接许可证传递所述内容资源包至被选中的资源服务器;The publisher is used to organize the content to be published into a content resource package, submit a content release request message to the authentication server, and use the connection license to transfer the content resource package to the selected resource server;

所述认证服务器用于根据所述内容发布请求报文选择资源服务器,返回所述被选中资源服务器信息和连接许可证给发布者。The authentication server is used to select a resource server according to the content publishing request message, and return the information of the selected resource server and the connection license to the publisher.

根据本发明的又一方面,上述网络数字媒体内容发布系统还包括端服务器群,用于从所述被选中资源服务器接收所述内容资源包。According to yet another aspect of the present invention, the above-mentioned network digital media content distribution system further includes an end server group, configured to receive the content resource package from the selected resource server.

根据本发明的又一方面,上述网络数字媒体内容发布系统的端服务器群是逻辑层次树结构,其中所述逻辑层次树中的上下级节点y→x至少具有一个如下特征:According to yet another aspect of the present invention, the terminal server group of the above-mentioned network digital media content distribution system is a logical hierarchical tree structure, wherein the upper and lower nodes y→x in the logical hierarchical tree have at least one of the following characteristics:

1)节点x访问所述被选中资源服务器需要经过节点y;1) Node x needs to pass through node y to access the selected resource server;

2)所述节点x直接访问所述被选中资源服务器的网络开销大于所述节点x访问所述节点y的开销。2) The network overhead for the node x to directly access the selected resource server is greater than the overhead for the node x to access the node y.

与现有技术相比,本方法除了考虑到改善内容发布的安全性以外,还提供了基于系统负载动态平衡机制的资源分布式部署技术。本方法的优点具体表现在以下几个方面:Compared with the prior art, in addition to improving the security of content publishing, the method also provides a resource distributed deployment technology based on a system load dynamic balance mechanism. The advantages of this method are embodied in the following aspects:

1)安全性好:数字媒体内容的发布者在进行内容发布时,并没有直接获得资源服务器的位置信息,而是在通过了身份认证后,由认证服务器衡量各资源服务器的负载程度,动态选择出内容本体的待存储服务器,生成连接该服务器的临时许可证后返回给发布者,用来连接资源服务器和进行内容发布时的数据加密。这样不仅杜绝了非法发布者向网络中进行随意的发布,降低了网络攻击的可能性,而且防止了数字媒体内容在网络传递过程中被盗取。1) Good security: The publisher of digital media content does not directly obtain the location information of the resource server when publishing the content, but after passing the identity authentication, the authentication server measures the load level of each resource server and dynamically selects the resource server. The server to be stored for the content ontology generates a temporary license to connect to the server and returns it to the publisher, which is used to connect to the resource server and encrypt data when publishing the content. This not only prevents illegal publishers from randomly publishing to the network, reduces the possibility of network attacks, but also prevents digital media content from being stolen during network transmission.

2)在内容发布流程中,自动根据待发布内容的位置、资源服务器的存储容量、网络状态等选择出合适的资源服务器,来进行数字媒体内容本体的传输和存储。另外,在多个端服务器上进行数字媒体内容分发时,采用了分层次并行分发技术,可以充分利用网络带宽资源,快速的实现资源的分布式部署。2) In the content publishing process, an appropriate resource server is automatically selected according to the location of the content to be released, the storage capacity of the resource server, and the network status to transmit and store the digital media content ontology. In addition, when digital media content is distributed on multiple end servers, the layered parallel distribution technology is adopted, which can make full use of network bandwidth resources and quickly realize the distributed deployment of resources.

3)透明性:发布者进行内容发布时,只要提供内容本体和待部署的端服务器清单即可,并不需要关心在数字媒体中心资源服务器的存储情况,也不需要了解资源向多个端服务器分发时的具体路径,这简化了操作流程,给发布者带来了便捷。3) Transparency: When publishing content, the publisher only needs to provide the content ontology and the list of end servers to be deployed, and does not need to care about the storage situation of the resource server in the digital media center, nor does it need to know how resources are distributed to multiple end servers. The specific path of distribution, which simplifies the operation process and brings convenience to the publisher.

附图说明 Description of drawings

下面结合附图对本发明的具体实施方式作进一步详细的说明,其中:Below in conjunction with accompanying drawing, specific embodiment of the present invention is described in further detail, wherein:

图1是网络数字媒体内容发布系统示意图;Fig. 1 is a schematic diagram of a network digital media content release system;

图2是发布者进行内容发布的处理过程;Fig. 2 is the processing process of content publishing by the publisher;

图3是认证服务器的处理过程;Fig. 3 is the processing procedure of the authentication server;

图4是系统的端服务器逻辑层次树的生成过程;Fig. 4 is the generation process of the logical hierarchy tree of the end server of the system;

图5是资源服务器的处理过程;Fig. 5 is the processing procedure of the resource server;

图6是端服务器的处理过程。Fig. 6 is the processing procedure of the end server.

具体实施方式Detailed ways

为了使本发明的目的、技术方案及优点更加清楚明白,下面参考附图并通过具体实例来对本发明进行更进一步的说明:In order to make the purpose, technical solutions and advantages of the present invention clearer, the present invention will be further described below with reference to the accompanying drawings and through specific examples:

图1是根据本发明实施例的网络数字媒体内容发布系统示意图。如图1所示,该内容发布系统采用分布式体系结构,由发布者、地理上分散的中心服务器群和端服务器群构成。发布者是数字媒体内容的提供商,可以是组织或个人,其可以拥有待发布内容的知识产权,并获得了内容发布数字证书。中心服务器群是架设在数字媒体中心的一组服务器,包括认证服务器、资源服务器、数据库服务器等,它们负责管理各种资源,包括内容本体、发布者信息、终端用户信息等等,是整个系统实现控制管理的中心。中心服务器群保存全部的数字媒体内容,根据端服务器的实际需求向其提供相关资源。端服务器群由一个或多个分散在不同地域的内容服务器构成,它保存本地所需的数字媒体资源和必要的本地终端用户信息。端服务器群提供终端用户请求的数字媒体内容,并根据情况动态与中心服务器群同步信息和数据。Fig. 1 is a schematic diagram of a network digital media content publishing system according to an embodiment of the present invention. As shown in Figure 1, the content publishing system adopts a distributed architecture, which is composed of publishers, geographically dispersed central server groups and end server groups. A publisher is a provider of digital media content, which can be an organization or an individual. It can own the intellectual property rights of the content to be published and has obtained a digital certificate for content release. The central server group is a group of servers set up in the digital media center, including authentication servers, resource servers, database servers, etc. They are responsible for managing various resources, including content ontology, publisher information, end user information, etc., and are the realization of the entire system. The center of control management. The central server group stores all digital media content, and provides relevant resources to end servers according to their actual needs. The end server group consists of one or more content servers scattered in different regions, which store the digital media resources required locally and the necessary information of local end users. The terminal server group provides digital media content requested by end users, and dynamically synchronizes information and data with the central server group according to the situation.

本领域普通技术人员应理解,上述数字媒体内容分发网络采用分布式体系结构,具有良好的可伸缩性,能够适应不同规模的应用需要。在数字媒体内容较少、终端用户数量较小时,可以合并端服务器与中心服务器的功能,即终端用户直接与资源服务器通信,以减少服务器的数量,降低系统运行成本。Those of ordinary skill in the art should understand that the above-mentioned digital media content distribution network adopts a distributed architecture, has good scalability, and can adapt to application needs of different scales. When the digital media content is small and the number of end users is small, the functions of the end server and the central server can be combined, that is, the end users directly communicate with the resource server to reduce the number of servers and reduce system operating costs.

发布者将待发布的数字媒体内容组织成资源包,由系统管理员给出其予以部署的端服务器列表。发布者与认证服务器通信,提交内容发布请求,经过认证服务器的身份与权限鉴别后,由认证服务器动态访问数据库服务器,获取各资源服务器状态,然后依据网络位置、负载状况等计算各资源服务器的服务质量,从中选择出最适合的资源服务器。认证服务器与该被选中的资源服务器通信,提交资源包传递请求。该资源服务器收到该请求后,根据自身的情况,决定资源包传递是否可以进行,如可以则生成临时的连接许可证,返回给认证服务器。认证服务器将可供使用的资源服务器信息与连接许可证返回给发布者。发布者使用该连接许可证与对应的资源服务器成功连接后,将资源包传递到该资源服务器上。获得了数字媒体内容的资源服务器根据资源包的端服务器配置要求,要将资源包分发到指定的端服务器上。The publisher organizes the digital media content to be published into a resource package, and the system administrator provides a list of end servers for deployment. The publisher communicates with the authentication server, submits a content release request, and after the identity and authority authentication of the authentication server, the authentication server dynamically accesses the database server to obtain the status of each resource server, and then calculates the service of each resource server according to the network location and load status. Quality, from which the most suitable resource server is selected. The authentication server communicates with the selected resource server, and submits a resource package transfer request. After receiving the request, the resource server determines whether the resource package transfer can be carried out according to its own situation, and if so, generates a temporary connection license and returns it to the authentication server. The authentication server returns available resource server information and connection licenses to the publisher. After the publisher uses the connection license to successfully connect to the corresponding resource server, it transfers the resource package to the resource server. The resource server that has obtained the digital media content will distribute the resource package to the designated terminal server according to the configuration requirements of the terminal server of the resource package.

为了高效的实现端服务器内容分发过程,基于系统负载动态平衡机制,根据本发明的一个优选实施例,还提供了端服务器分层次并行分发方法。系统预先根据服务器的处理性能、网络带宽状况,将端服务器组织成一个逻辑层次树,其中该树中的每个节点代表一个端服务器。每当进行端服务器内容分发时,根据资源配置需求,对该层次树进行裁减,生成资源包转发树,附加在资源包的属性中。资源服务器或端服务器收到资源包后,查询转发树,获得自己的孩子节点,然后分别建立TCP连接,发送数据。当孩子节点收到数据后,继续转发树的查找,再向下级节点转发数据。一直重复这样的过程,直到所有的端服务器都收到资源包为止。为了实现上述技术,需要生成数字媒体内容分发网络的端服务器逻辑层次树,下面以包括虚根在内的3层端服务器逻辑层次树为例对该过程进行描述,其中该虚根在生成过程中并非实际的物理设备,在内容分发时,由资源服务器代替该虚根,从而实现内容包从资源服务器到端服务器的分发。其生成流程如图2所示,执行如下步骤S2.1~S2.7:In order to efficiently realize the content distribution process of the end server, based on the system load dynamic balance mechanism, according to a preferred embodiment of the present invention, a layered parallel distribution method of the end server is also provided. The system organizes the end servers into a logical hierarchical tree according to the processing performance and network bandwidth conditions of the servers in advance, and each node in the tree represents an end server. Whenever the content distribution of the end server is performed, according to the resource configuration requirements, the hierarchical tree is trimmed to generate a resource package forwarding tree, which is added to the attribute of the resource package. After receiving the resource packet, the resource server or end server queries the forwarding tree to obtain its own child nodes, and then establishes TCP connections and sends data respectively. After the child node receives the data, it continues to search the forwarding tree, and then forwards the data to the subordinate node. This process is repeated until all end servers have received resource bundles. In order to realize the above-mentioned technology, it is necessary to generate a logical hierarchical tree of the end server of the digital media content distribution network. The process is described below taking a three-layer logical hierarchical tree of the end server including the virtual root as an example, wherein the virtual root is generated during the generation process It is not an actual physical device. When content is distributed, the virtual root is replaced by the resource server, so as to realize the distribution of the content package from the resource server to the end server. The generation process is shown in Figure 2, and the following steps S2.1 to S2.7 are performed:

S2.1:每当系统中增加或删除端服务器时,系统的所有端服务器信息构成端服务器节点集合S。S2.1: Whenever an end server is added or deleted in the system, all end server information in the system constitutes an end server node set S.

S2.2:系统按照距离中心服务器群的位置远近、带宽大小排序集合S中的节点,形成递增序列。S2.2: The system sorts the nodes in the set S according to the distance from the central server group and the bandwidth, forming an increasing sequence.

S2.3:按照序列的顺序,从集合S中寻找一对适合直接传递资源包的端服务器,构成上下级关系y→x。其中,x为下级节点,其访问中心服务器群需中途经过y或其直接访问中心服务器群的网络开销大于x访问y的开销。S2.3: According to the order of the sequence, find a pair of end servers suitable for direct delivery of resource packages from the set S to form a superior-subordinate relationship y→x. Among them, x is a lower-level node, and its access to the central server group needs to pass through y or the network cost of directly accessing the central server group is greater than the cost of x's access to y.

S2.4:如果存在这样的一对端服务器上下级关系,则执行步骤S2.5,否则执行步骤S2.6。S2.4: If there is such a pair of end server-subordinate relationship, execute step S2.5, otherwise execute step S2.6.

S2.5:将下级端服务器节点x从集合S去掉,加入下级节点集合U。同时将上下级关系y→x加入偏序关系集合W。执行步骤S2.3。S2.5: Remove the lower-level server node x from the set S, and add it to the lower-level node set U. At the same time, add the upper-lower relationship y→x to the partial order relationship set W. Execute step S2.3.

S2.6:建立具有一个虚根的逻辑树。端服务器节点集合S中剩余的节点,作为虚根的孩子节点,加入逻辑树。S2.6: Build a logical tree with a virtual root. The remaining nodes in the end server node set S are added to the logical tree as child nodes of the virtual root.

S2.7:根据偏序关系集合W中的上下级关系信息,将集合U中节点作为上述孩子节点的孩子节点,依次加入逻辑树。S2.7: According to the upper-lower relationship information in the partial order relationship set W, use the nodes in the set U as the child nodes of the above child nodes, and add them to the logic tree in turn.

应注意:逻辑层次树并不限于3层,任意层的逻辑层次树均可按照类似于上述流程生成。基于上述逻辑层次树,下面结合附图2至图6的所示的流程对各个部件的运行步骤进行具体描述:It should be noted that the logical hierarchy tree is not limited to three layers, and a logical hierarchy tree of any layer can be generated according to a process similar to the above. Based on the above-mentioned logical hierarchy tree, the operation steps of each component are described in detail below in conjunction with the flow shown in Figure 2 to Figure 6:

如图3根据本发明实施例的发布者进行内容发布的流程图所示,发布者内容发布包括如下步骤S3.1~S3.8:As shown in FIG. 3 , the flow chart of content publishing by a publisher according to an embodiment of the present invention, content publishing by a publisher includes the following steps S3.1 to S3.8:

S3.1:发布者在进行内容发布前,将本地的数字媒体内容资源组织成内容资源包,其中该内容资源包包括内容本体、描述信息和包含待部属端服务器列表的控制信息。S3.1: Before publishing content, the publisher organizes local digital media content resources into a content resource package, where the content resource package includes content ontology, description information and control information including a list of servers to be deployed.

S3.2:构造内容发布请求报文,发送给认证服务器,该内容发布请求报文包括如下内容:S3.2: Construct a content release request message and send it to the authentication server. The content release request message includes the following content:

发布者身份信息,由发布者ID和预分配的证书加密的密码组成;Publisher identity information, consisting of a publisher ID and a password encrypted with a pre-assigned certificate;

发布请求信息,包括资源包标识、名称、存储容量要求以及待部署的端服务器列表。Publish request information, including resource bundle ID, name, storage capacity requirements, and a list of end servers to be deployed.

S3.3:发布者进入等待状态,等待接收由认证服务器返回的应答报文。如果在设定时间内发布者始终没有收到应答报文则否则进入S3.6步骤。S3.3: The issuer enters the waiting state, waiting to receive the response message returned by the authentication server. If the issuer has not received the response message within the set time, otherwise enter step S3.6.

S3.4:发布者收到由认证服务器回复的报文后,进行解密。S3.4: After receiving the message replied by the authentication server, the issuer decrypts it.

S3.5:根据解密报文的内容,判断是否允许进行内容发布。如果不允许,则进入S3.6步骤;否则进入S3.7步骤。S3.5: According to the content of the decrypted message, determine whether to allow content release. If not allowed, go to step S3.6; otherwise go to step S3.7.

S3.6:发布者没有获得认证服务器的授权许可证,不能够进行内容发布,内容发布操作失败。S3.6: The publisher has not obtained the authorization license from the authentication server, cannot publish the content, and the content publishing operation fails.

S3.7:发布者获得认证服务器的答复的资源服务器信息以及对应的连接许可证。发布者使用该许可证建立与该资源服务器的连接。S3.7: The issuer obtains the resource server information and the corresponding connection license from the authentication server's reply. The publisher uses this license to establish a connection to this resource server.

S3.8:利用已经建立的连接,发布者将内容资源包传递到该资源服务器。S3.8: Using the established connection, the publisher transmits the content resource package to the resource server.

如图4根据本发明实施例的认证服务器的执行流程图所示,认证服务器的执行过程包括如下步骤S4.1~S4.12:As shown in Figure 4, the execution flow chart of the authentication server according to the embodiment of the present invention, the execution process of the authentication server includes the following steps S4.1-S4.12:

S4.1:认证服务器接收发布者的内容发布请求报文。S4.1: The authentication server receives the publisher's content publishing request message.

S4.2:认证服务器解密发布者请求报文,根据发布者请求报文访问数据库服务器,获得发布者证书,提取发布者的身份信息。S4.2: The authentication server decrypts the publisher's request message, accesses the database server according to the publisher's request message, obtains the publisher's certificate, and extracts the publisher's identity information.

S4.3:根据发布者身份信息检查发布者权限,如果发布者有内容发布的权限,则执行步骤S4.4,否则执行步骤S4.12。S4.3: Check the publisher's permission according to the publisher's identity information, if the publisher has the content publishing permission, go to step S4.4, otherwise go to step S4.12.

S4.4:认证服务器访问数据库服务器,获取系统的各资源服务器状态信息,包括剩余存储容量、处理能力、负载状况、网络带宽等。S4.4: The authentication server accesses the database server to obtain the status information of each resource server of the system, including remaining storage capacity, processing capacity, load status, network bandwidth, etc.

S4.5:根据发布者的内容发布请求报文要求,判断是否系统中存在可用的资源服务器,如果存在,则执行步骤S4.6,否则执行步骤S4.12。S4.5: Determine whether there is an available resource server in the system according to the publisher's content release request message, and if so, execute step S4.6; otherwise, execute step S4.12.

S4.6:从可用的资源服务器中根据处理能力、负载情况及网络带宽选择出最适合本次发布的资源服务器。S4.6: Select the most suitable resource server for this release from the available resource servers according to processing capacity, load conditions and network bandwidth.

S4.7:认证服务器根据发布者请求报文信息和资源包描述信息构造请求报文,向被选中的资源服务器提交内容资源包传递请求。在传递请求前,报文用资源服务器的公钥加密,并使用认证服务器的证书签名。S4.7: The authentication server constructs a request message according to the publisher's request message information and the resource package description information, and submits a content resource package transfer request to the selected resource server. Before delivering the request, the message is encrypted with the public key of the resource server and signed with the certificate of the authentication server.

S4.8:认证服务器等待接收资源服务器的应答报文,如果在规定时间内没有收到应答报文,则执行步骤S4.5,否则执行步骤S4.9。S4.8: The authentication server waits to receive the response message from the resource server. If no response message is received within the specified time, go to step S4.5, otherwise go to step S4.9.

S4.9:认证服务器收到资源服务器对资源包传递请求的应答报文,并对报文进行解密。S4.9: The authentication server receives the response message from the resource server to the resource package transfer request, and decrypts the message.

S4.10:认证服务器根据应答报文信息,判断资源服务器是否允许进行此次资源包传递。如果允许,执行步骤S4.11,否则执行步骤S4.5。S4.10: The authentication server judges whether the resource server allows the transfer of the resource package according to the response message information. If allowed, go to step S4.11, otherwise go to step S4.5.

S4.11:认证服务器构造并发送应答发布者的报文,该应答报文中附加授权信息,包括将连接的资源服务器信息和连接该服务器的动态许可证。S4.11: The authentication server constructs and sends a response message to the publisher, and the response message includes authorization information, including the resource server information to be connected and the dynamic license to connect to the server.

S4.12:认证服务器构造并发送应答发布者的报文,该应答报文拒绝内容发布要求,并附加拒绝原因。S4.12: The authentication server constructs and sends a response message to the publisher, the response message rejects the content release request, and adds a reason for the rejection.

如图5根据本发明优选实施例的资源服务器的执行流程图所示,资源服务器的执行过程包括如下步骤S5.1~S5.10:As shown in Figure 5, the execution flow chart of the resource server according to the preferred embodiment of the present invention, the execution process of the resource server includes the following steps S5.1 to S5.10:

S5.1:资源服务器接收认证服务器的数字媒体内容资源包传递请求报文。S5.1: The resource server receives the digital media content resource package delivery request message from the authentication server.

S5.2:资源服务器对认证服务器的签名进行验证,并用自己的私钥将报文解密。S5.2: The resource server verifies the signature of the authentication server, and decrypts the message with its own private key.

S5.3:判断身份验证是否有效,如果身份验证有效,则执行步骤S5.4,否则执行步骤S5.5。S5.3: Determine whether the identity verification is valid, if the identity verification is valid, execute step S5.4, otherwise execute step S5.5.

S5.4:资源服务器根据待传送数字媒体内容资源包的属性和目前系统存储容量、处理能力、系统负载、网络带宽决定是否允许传送,如允许,则执行S5.6,否则执行步骤S5.5。S5.4: The resource server decides whether to allow the transmission according to the attributes of the digital media content resource package to be transmitted and the current system storage capacity, processing capacity, system load, and network bandwidth. If allowed, execute S5.6; otherwise, execute step S5.5 .

S5.5:资源服务器构造并返回认证服务器资源包传递拒绝报文,并给出拒绝的原因。S5.5: The resource server constructs and returns a resource packet to the authentication server to deliver a rejection message, and gives the reason for the rejection.

S5.6:资源服务器生成供发布者使用的临时连接许可证,包含在应答报文中,发送给认证服务器。其中该连接许可证可以是动态的。S5.6: The resource server generates a temporary connection license for the publisher, includes it in the response message, and sends it to the authentication server. Wherein the connection license may be dynamic.

S5.7:资源服务器等待发布者的连接请求。S5.7: The resource server waits for the publisher's connection request.

S5.8:资源服务器收到发布者的连接请求,根据临时连接许可证进行身份认证后,建立连接,进行资源包的传递。S5.8: After receiving the connection request from the publisher, the resource server establishes a connection after performing identity authentication according to the temporary connection license, and transmits the resource package.

S5.9:资源服务器对收到的资源包进行分析,根据其端服务器部署清单,在系统端服务器逻辑层次树中保留对应节点,而删除无关的端服务器,并以自身替换该层次逻辑树的虚根,建立该资源包的转发树。S5.9: The resource server analyzes the received resource package, and according to its end server deployment list, reserves the corresponding nodes in the system end server logic hierarchy tree, deletes irrelevant end servers, and replaces the end server in the hierarchy logic tree with itself The virtual root establishes the forwarding tree of the resource package.

S5.10:资源服务器从转发树中取出自己的孩子节点,依次与这些孩子节点的端服务器建立连接,传递资源包和转发树信息。S5.10: The resource server takes out its own child nodes from the forwarding tree, establishes connections with the end servers of these child nodes in turn, and transmits resource packets and forwarding tree information.

如图6根据本发明优选实施例的端服务器的执行流程图所示,端服务器的执行步骤包括S6.1~S6.5:As shown in Fig. 6 according to the execution flowchart of the end server according to the preferred embodiment of the present invention, the execution steps of the end server include S6.1~S6.5:

S6.1:端服务器接收其父节点的资源服务器或端服务器的数字媒体内容资源包传递请求。S6.1: The end server receives a digital media content resource package delivery request from the resource server of its parent node or the end server.

S6.2:端服务器与该服务器建立连接,接收资源包以及对应的转发树信息。S6.2: The end server establishes a connection with the server, and receives resource packets and corresponding forwarding tree information.

S6.3:端服务器判断自己是否是转发树的叶子节点,如果是,则不必继续转发,执行步骤S6.5,否则执行步骤S6.4。S6.3: The end server judges whether it is a leaf node of the forwarding tree, if yes, it does not need to continue forwarding, and executes step S6.5, otherwise executes step S6.4.

S6.4:端服务器从转发树中取出自己的孩子节点,依次与这些端服务器建立连接,传递资源包和转发树信息。S6.4: The end server takes out its own child nodes from the forwarding tree, establishes connections with these end servers in turn, and transmits resource packets and forwarding tree information.

S6.5:结束。S6.5: End.

对于本领域的普通技术人员,可以理解获得了数字媒体内容的资源服务器根据资源包的端服务器配置要求,要将资源包分发到对应的端服务器上的步骤也可以不采用端服务器分层次并行分发技术,而是逐个与各端服务器分别建立连接,传递资源包。For those of ordinary skill in the art, it can be understood that the resource server that has obtained the digital media content can distribute the resource package to the corresponding terminal server according to the terminal server configuration requirements of the resource package. technology, but to establish connections with the servers at each end one by one, and transfer resource packages.

应该注意到并理解,在不脱离后附的权利要求所要求的本发明的精神和范围的情况下,能够对上述详细描述的本发明做出各种修改和改进。因此,要求保护的技术方案的范围不受所给出的任何特定示范教导的限制。It should be noted and understood that various modifications and improvements can be made to the invention described in detail above without departing from the spirit and scope of the invention as claimed in the appended claims. Accordingly, the scope of the claimed technical solution is not limited by any particular exemplary teaching given.

Claims (11)

1.一种网络数字媒体内容发布方法,其包括如下步骤:1. A method for publishing network digital media content, comprising the steps of: 1)将待发布内容组织成内容资源包,向认证服务器提交内容发布请求报文;1) Organize the content to be released into a content resource package, and submit a content release request message to the authentication server; 2)所述认证服务器根据所述内容发布请求报文选择资源服务器;2) The authentication server selects a resource server according to the content release request message; 3)所述认证服务器返回被选中资源服务器信息和连接许可证给发布者;3) The authentication server returns the selected resource server information and connection license to the publisher; 4)所述发布者使用所述连接许可证将所述内容资源包传递到所述被选中资源服务器。4) The publisher uses the connection license to deliver the content resource package to the selected resource server. 2.根据权利要求1所述的方法,其特征在于,所述步骤4)后包括步骤5)所述被选中资源服务器将所述内容资源包分发到指定端服务器。2. The method according to claim 1, characterized in that, after the step 4), the step 5) the selected resource server distributes the content resource package to the designated server. 3.根据权利要求2所述的方法,其特征在于,所述步骤5)采用端服务器分层并行分发方法,包括如下步骤:3. The method according to claim 2, characterized in that, said step 5) adopts an end-server layered parallel distribution method, comprising the steps of: 51)排列端服务器节点序列;51) arrange the end server node sequence; 52)按照所述节点序列,确定所述节点间的上下级关系;52) According to the node sequence, determine the superior-subordinate relationship between the nodes; 53)根据所述节点间的上下级关系建立端服务器逻辑层次树;53) Establishing a logical hierarchical tree of end servers according to the upper-lower relationship between the nodes; 54)根据所述端服务器逻辑层次树执行所述被选中资源服务器将所述内容资源包分发到所述指定端服务器。54) Executing the selected resource server to distribute the content resource package to the specified end server according to the end server logical hierarchy tree. 4.根据权利要求3所述的方法,其特征在于,所述步骤54)包括如下步骤:4. method according to claim 3, is characterized in that, described step 54) comprises the steps: 541)执行所述被选中资源服务器根据所述内容资源包和所述端服务器逻辑层次树建立所述内容资源包的转发树;541) Executing the selected resource server to establish a forwarding tree of the content resource package according to the content resource package and the logical hierarchical tree of the end server; 542)执行传递所述资源包和所述转发树信息至所述被选中资源服务器的孩子节点;542) Execute delivering the resource package and the forwarding tree information to the child node of the selected resource server; 543)执行所述被选中资源服务器的孩子节点判断自己是否是所述转发树的叶子节点,如果是,则结束,否则执行步骤544);543) Execute the child node of the selected resource server to judge whether it is a leaf node of the forwarding tree, if yes, then end, otherwise, execute step 544); 544)根据所述转发树信息传递资源包和转发树信息至所述指定端服务器。544) Transfer the resource package and the forwarding tree information to the designated end server according to the forwarding tree information. 5.根据权利要求1至4中任一项所述的方法,其特征在于,所述步骤1)中所述内容发布请求报文包括发布者身份信息和发布请求信息。5. The method according to any one of claims 1 to 4, characterized in that the content release request message in the step 1) includes publisher identity information and release request information. 6.根据权利要求5所述的方法,其特征在于,所述步骤2)包括根据所述发布者请求报文访问数据库服务器,获得发布者证书,从而检查发布者权限。6 . The method according to claim 5 , wherein the step 2) includes accessing a database server according to the publisher's request message to obtain a publisher's certificate, thereby checking the publisher's authority. 7.根据权利要求1至4中任一项所述的方法,其特征在于,所述步骤2)包括:7. The method according to any one of claims 1 to 4, wherein said step 2) comprises: 根据所述内容发布请求报文判断资源服务器是否可用;judging whether the resource server is available according to the content release request message; 从可用的资源服务器中根据处理能力、负载情况及网络带宽选择最优的资源服务器。Select the optimal resource server from the available resource servers according to the processing capacity, load conditions and network bandwidth. 8.根据权利要求1至4中任一项所述的方法,其特征在于,所述步骤3)中所述连接许可证是动态的。8. The method according to any one of claims 1 to 4, characterized in that the connection license in the step 3) is dynamic. 9.一种网络数字媒体内容发布系统,所述发布系统包括发布者、认证服务器、资源服务器和数据库服务器,其特征在于:9. A network digital media content publishing system, said publishing system comprising a publisher, an authentication server, a resource server and a database server, characterized in that: 所述发布者用于将待发布内容组织成内容资源包,提交内容发布请求报文至认证服务器,使用连接许可证传递所述内容资源包至被选中的资源服务器;The publisher is used to organize the content to be published into a content resource package, submit a content release request message to the authentication server, and use the connection license to transfer the content resource package to the selected resource server; 所述认证服务器用于根据所述内容发布请求报文选择资源服务器,返回所述被选中资源服务器信息和连接许可证给发布者。The authentication server is used to select a resource server according to the content publishing request message, and return the information of the selected resource server and the connection license to the publisher. 10.根据权利要求9所述的系统,其特征在于,还包括端服务器群,用于从所述被选中资源服务器接收所述内容资源包。10. The system according to claim 9, further comprising an end server group, configured to receive the content resource package from the selected resource server. 11.根据权利要求10所述的系统,其特征在于,所述端服务器群是逻辑层次树结构,其中所述逻辑层次树中的上下级节点y→x至少具有一个如下特征:11. The system according to claim 10, wherein the end server group is a logical hierarchical tree structure, wherein the upper and lower nodes y→x in the logical hierarchical tree have at least one of the following characteristics: 1)节点x访问所述被选中资源服务器需要经过节点y;1) Node x needs to pass through node y to access the selected resource server; 2)所述节点x直接访问所述被选中资源服务器的网络开销大于所述节点x访问所述节点y的开销。2) The network overhead for the node x to directly access the selected resource server is greater than the overhead for the node x to access the node y.
CNA2008101045856A 2008-04-21 2008-04-21 Method and system for publishing network digital media content Pending CN101262454A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CNA2008101045856A CN101262454A (en) 2008-04-21 2008-04-21 Method and system for publishing network digital media content

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CNA2008101045856A CN101262454A (en) 2008-04-21 2008-04-21 Method and system for publishing network digital media content

Publications (1)

Publication Number Publication Date
CN101262454A true CN101262454A (en) 2008-09-10

Family

ID=39962662

Family Applications (1)

Application Number Title Priority Date Filing Date
CNA2008101045856A Pending CN101262454A (en) 2008-04-21 2008-04-21 Method and system for publishing network digital media content

Country Status (1)

Country Link
CN (1) CN101262454A (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101699894B (en) * 2009-11-10 2012-07-25 广州杰赛科技股份有限公司 Method and device for processing authentication request in authentication server cluster
CN102957733A (en) * 2011-08-31 2013-03-06 中国科学院声学研究所 Content publish method and system with dynamic adjusting and optimizing function

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101699894B (en) * 2009-11-10 2012-07-25 广州杰赛科技股份有限公司 Method and device for processing authentication request in authentication server cluster
CN102957733A (en) * 2011-08-31 2013-03-06 中国科学院声学研究所 Content publish method and system with dynamic adjusting and optimizing function
CN102957733B (en) * 2011-08-31 2015-12-02 中国科学院声学研究所 A kind of content delivery method of dynamic tuning and system

Similar Documents

Publication Publication Date Title
Samaniego et al. Zero-trust hierarchical management in IoT
US11240213B2 (en) Resource obtaining, distribution, and download method and apparatus, device, and storage medium
CN110598394B (en) Authority verification method and device and storage medium
CN105812488B (en) Cloud computing Distributed Services group system and its method
CN111988338B (en) Permission controllable IoT cloud platform and data interaction method based on blockchain
Hoang et al. A dynamic edge caching framework for mobile 5G networks
CN101068245B (en) Shared file issuing and downloading method and file sharing control system
US9047462B2 (en) Computer account management system and realizing method thereof
CN108418784B (en) Distributed cross-domain authorization and access control method based on attribute password
US7966491B2 (en) Protection of the distribution of digital documents in a peer to peer network
CN111654465A (en) A blockchain-based cross-domain trusted authentication system and method for power business
CN110572258B (en) A cloud cryptographic computing platform and computing service method
CN102904870B (en) Server unit and information processing method
CN102413159B (en) A Trusted Online Storage System Oriented to Networked Operating System
CN106790555A (en) A kind of method and system of community's shared education resources service interface
CN105516110A (en) Mobile equipment secure data transmission method
CN109583221A (en) Dropbox system based on cloudy server architecture
CN104993926B (en) Hierarchical key management system and method based on cloud computing in smart power grid
Chen et al. Task-Attribute-Based Access Control Scheme for IoT via Blockchain.
Chai et al. BHE-AC: A blockchain-based high-efficiency access control framework for Internet of Things
CN101262454A (en) Method and system for publishing network digital media content
CN115051989B (en) A refined distributed access control method based on blockchain in industrial Internet of Things
CN110233829A (en) Confidential information system and communication means based on distributed storage
Su et al. An Action‐Based Fine‐Grained Access Control Mechanism for Structured Documents and Its Application
CN100559870C (en) Video-on-demand system and method for realizing data deployment of the system

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C12 Rejection of a patent application after its publication
RJ01 Rejection of invention patent application after publication

Open date: 20080910