CN101820525A

CN101820525A - Televiewing control method and device

Info

Publication number: CN101820525A
Application number: CN200910078929.5A
Authority: CN
Inventors: 王天星; 王宇; 余书义; 王文军; 李东; 李伟东; 韩坚
Original assignee: Beijing Shibo Digital TV Technology Co Ltd
Current assignee: Beijing Shibo Digital TV Technology Co Ltd
Priority date: 2009-02-27
Filing date: 2009-02-27
Publication date: 2010-09-01

Abstract

The invention provides a televiewing control method and device. The method comprises the following steps: a subordinate user terminal receives superior entitlement control messages sent by a superior conditional access system (CAS), wherein the superior entitlement control messages include program identities, broadcast attributes and encrypted descrambled control words; the subordinate user terminal judges whether the programs corresponding to the program identities are entitled by the superior CAS and the subordinate CAS; and if so, the subordinate user terminal decrypts the superior entitlement control messages to obtain the descrambled control words. By the method, the subordinate user terminal can watch the superior programs only after being entitled by the superior CAS and the subordinate CAS simultaneously, thereby effectively ensuring the benefits of the subordinate and superior network operators. The method is simple to implement and low in cost.

Description

Viewing control method and device

Technical Field

The present invention relates to a conditional access system for digital television, and more particularly, to a viewing control method and apparatus thereof.

Background

As is well known, a Conditional Access System (CAS) is a System for controlling a user to receive a broadcast service, i.e., a user can receive only an authorized broadcast service, and the purpose of the CAS is to implement a paid service of a broadcast System through authorization management.

A typical digital television system is mainly composed of a front end, a receiving terminal, and the like.

At the front end: a user management system (SMS) for processing, maintaining and managing program information, user equipment information, program reservation information, user authorization management information, financial information, etc.; the Conditional Access System (CAS) is used for completing the processing of obtaining, generating, sending and the like of the user authorization control information and the user authorization management information; an encryption device that encrypts information using a public key algorithm; scrambling equipment (including a multiplexer and a scrambling unit) scrambles program information and private data by adopting a standard DVB scrambling algorithm. At a receiving terminal: the device consists of two separated receiving and processing devices: namely the set-top box and the security device.

The set-top box of each user firstly filters out the data packet belonging to the user according to the user information and transmits the data packet to the user safety device, the safety device decrypts the product key in the authorized data packet by using the user key, the decrypted product key is stored in the safety device and is used for decrypting the scrambling control word CW, the decrypted scrambling control word is sent out of the safety device to the descrambling module to descramble the digital program, and the user can watch the descrambled program.

At present, in a CAS operation system, an upper CAS and a lower CAS are often operated in the same station, and no effective method is available for solving the problems of how a terminal receives and watches an upper program, how to realize the control of the upper and lower operators on programs, users and authorization, and ensuring the benefits of the two-stage operators.

Disclosure of Invention

The embodiment of the invention aims to provide a viewing control method and device and a two-stage conditional access system. The method ensures that the user terminal can watch the superior program only when the user terminal obtains the authorization of the superior CAS and the subordinate CAS at the same time, thereby effectively ensuring the benefits of the inferior network operator and the superior network operator. The device is simple and low in cost.

To achieve the above object, an embodiment of the present invention provides a viewing control method, including: the subordinate user terminal receives superior authorization control information sent by a superior conditional access system, wherein the superior authorization control information comprises a program identifier, a playing attribute and an encrypted descrambling control word; judging whether the upper-level program corresponding to the program identifier obtains the authorization of the upper level and the lower level; if the judgment result is yes, the subordinate user terminal decrypts the superior authorization control information to obtain the descrambling control word.

To achieve the above object, an embodiment of the present invention provides an audience control apparatus, including:

the device comprises an authorization control information receiving unit, a condition receiving unit and a control unit, wherein the authorization control information receiving unit is used for receiving superior authorization control information sent by a superior condition receiving system, and the superior authorization control information comprises a program identifier, a playing attribute and an encrypted descrambling control word;

the information processing unit is used for judging whether the superior program corresponding to the program identifier obtains superior and subordinate authorization or not;

and the decryption unit is used for decrypting the upper-level authorization control information to obtain the descrambling control word if the processing result of the information processing unit is positive.

To achieve the above object, an embodiment of the present invention provides a viewing control method, including: generating superior authorization control information corresponding to a superior program, wherein the superior authorization control information comprises a program identifier, a preset playing attribute and an encrypted descrambling control word; and sending the upper authorization control information to the lower user terminal.

To achieve the above object, an embodiment of the present invention provides an audience control apparatus, including: a superior conditional access system and an inferior conditional access system; wherein,

the upper conditional access system includes:

the device comprises an authorization control information generating unit, a decoding unit and a decoding unit, wherein the authorization control information generating unit is used for generating upper-level authorization control information corresponding to an upper-level program, and the authorization control information comprises a program identifier, a preset playing attribute and an encrypted descrambling control word;

and the authorization control information sending unit is used for sending the authorization control information to the lower-level user terminal.

The method has the advantages that the user terminal can watch the superior program only when obtaining the authorization of the superior CAS and the subordinate CAS at the same time, thereby effectively ensuring the benefits of the inferior network operator and the superior network operator.

Drawings

The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the invention and together with the description serve to explain the principles of the invention. In the drawings:

fig. 1 is a flowchart of a viewing control method according to embodiment 1 of the present invention;

fig. 2 is a flowchart of a viewing control method according to embodiment 2 of the present invention;

fig. 3 is a flowchart of a viewing control method of a two-stage conditional access system according to embodiment 3 of the present invention;

fig. 4 is a flowchart of acquiring and processing authorization management information in embodiment 3 of the present invention;

fig. 5 is a schematic view of the configuration of an audience control apparatus according to embodiment 4 of the present invention;

fig. 6 is a schematic view of the configuration of an audience control apparatus according to embodiment 5 of the present invention;

fig. 7 is a schematic view of the configuration of an audience control apparatus according to embodiment 6 of the present invention;

fig. 8 is a schematic diagram of a lower user terminal configuration according to embodiment 6 of the present invention.

Detailed Description

In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention will be described in further detail with reference to the following embodiments and accompanying drawings. The exemplary embodiments and descriptions of the present invention are provided to explain the present invention, but not to limit the present invention.

Embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

Example 1

An embodiment of the present invention provides a viewing control method, as shown in fig. 1, where the method includes: generating upper-level authorization control information corresponding to an upper-level program, wherein the upper-level authorization control information comprises a program identifier, a playing attribute and an encrypted descrambling Control Word (CW) (see step 101); the upper authorization control information is sent to the user terminal (see step 102).

In this way, the user terminal can process the authorization control information to obtain a descrambling control word, and descramble the scrambled upper-level program according to the descrambling control word, so that the user can watch the television program.

In this embodiment, the ECM packet may be the entitlement control message.

In this embodiment, the playing attribute set by the upper level operator may be a broadcast permission condition or a broadcast prohibition condition for playing the upper level program. For example, if the broadcast barring condition is set, the broadcast barring condition may be set arbitrarily, for example, the broadcast barring condition is configured by using a feature value corresponding to the security device of the lower-level user terminal, where, if the broadcast barring condition is "CHR 3 × 0x80000000 ═ 0x 00000000", where the CHR3 represents a feature value 3 of the security device (the security device may have multiple feature values), the broadcast barring condition represents: when the AND operation of the characteristic value 3 and 0x80000000 of the safety device is 0x00000000, the condition that the watching condition is not met can be determined, and the playing is forbidden; that is, if the highest bit of the feature value 3 of the security device is 0, the no-broadcast condition is satisfied, and the terminal cannot watch the upper program. Similarly, the playing condition may also be configured, which is similar to the broadcast prohibiting condition, and is not described herein again. The present invention is not limited to the configuration of the feature value 3, and may be configured using other feature values or attribute values of the security device.

Therefore, after the next-stage user terminal receives the ECM data packet, the ECM data packet can be processed to judge whether the authorization management information of the previous-stage program exists or not and whether the viewing condition is met or not, and the ECM data packet can be processed only if the authorization management information of the previous-stage program and the viewing condition are met, so that the descrambling control words can be obtained.

Therefore, the method ensures that the user terminal can watch the superior program only when obtaining the authorization of the superior CAS and the subordinate CAS at the same time, thereby effectively ensuring the benefits of the inferior network operator and the superior network operator.

Example 2

An embodiment of the present invention provides a viewing control method, as shown in fig. 2, where the method includes: the subordinate user terminal receives superior authorization control information sent by a superior conditional access system, wherein the superior authorization control information comprises a program identifier, a playing attribute and an encrypted descrambling control word (see step 201); judging whether the program corresponding to the program identifier obtains the authorization of the upper level and the lower level (see step 202); if yes, the user terminal decrypts the upper authorization control information to obtain a descrambling control word (see step 203).

In this embodiment, in step 202, if the determination result is no, the user terminal does not perform any processing on the authorization control information, so that the user cannot watch the authorized program.

In step 202, it is determined whether the upper level program is authorized by the upper level program, which may be as follows: and judging whether the user terminal has a product key corresponding to the superior program, and if so, determining that the superior program obtains superior authorization. However, at this time, the authorization control information is not decrypted, but it is further determined whether the upper level program obtains the authorization of the lower level, that is, it is determined whether the upper level program meets the viewing condition according to the playing condition and the pre-stored feature information, wherein the playing attribute may be a broadcast-ready condition or a broadcast-prohibited condition, and as described in embodiment 1, the feature information may be introduced into an expression of the broadcast-ready condition or the broadcast-prohibited condition. If the broadcast-forbidden expression is satisfied, determining that the audience rating condition is not satisfied and the lower authorization is not obtained when the broadcast-forbidden expression is satisfied; otherwise, the receiving condition is satisfied, and the lower authorization is obtained. Similarly, if the broadcast-ready expression is obtained, when the broadcast-ready expression is met, the audience rating condition is determined to be met, and the subordinate authorization is obtained; otherwise, the receiving condition is not satisfied, and the lower authorization is not obtained.

For example, if the playback attribute is a playback-prohibited condition, the playback-prohibited condition has an expression "CHR 3 × 0x80000000 ═ 0x 000000000000". The user terminal can judge according to the expression and the pre-stored characteristic information, if the highest position of the characteristic value 3 of the safety device pre-stored by the subordinate user terminal is '1', the value is brought into the broadcasting forbidding expression, and thus, if the expression is not satisfied, the user terminal is proved to satisfy the watching condition and obtain subordinate authorization. It can be seen that the lower authorization may be used to set the feature value 3 of the security device, i.e., "CHR 3 ═ 0x 80000000", so that the security device does not satisfy the no-broadcast expression, and the end user can watch the upper program.

It can be known from the above that the superior program can be processed only when the superior CAS and the subordinate CAS are authorized at the same time to obtain the descrambling control word, so that the user can watch the superior program, thereby effectively ensuring the benefits of the inferior network operator and the superior network operator.

Example 3

The present invention provides a viewing control method, which is described below with reference to fig. 3 by taking a two-stage conditional access system as an example, where the two-stage conditional access system includes an upper conditional access system and a lower conditional access system.

In a two-stage conditional access system:

301, configuring the play attribute of the superior program by the superior conditional access system;

step 302, generating the upper authorization control information corresponding to the upper program and sending the authorization control information to the user terminal, where the authorization control information includes a program identifier, a playing attribute, and an encrypted descrambling Control Word (CW).

In a two-stage conditional access system terminal:

step 303, the subordinate user terminal receives the superior authorization control information sent by the superior conditional access system, wherein the superior authorization control information comprises a program identifier, a playing attribute and an encrypted descrambling control word;

step 304, determining whether the upper level program corresponding to the program identifier obtains upper level authorization, that is, whether authorization management information corresponding to the upper level program exists in the lower level user terminal, that is, whether a product key corresponding to the upper level program exists;

step 305, in step 304, if the determination result is yes, it is determined that the authorization of the upper level is obtained, and it is further determined whether the upper level program obtains the authorization of the lower level, that is, whether the upper level program meets the viewing condition; the manner of determining whether to obtain the authorization of the next level is shown in embodiment 1 and embodiment 2, and will not be described herein again.

In step 306, if the determination result is yes in step 305, the subordinate user terminal decrypts the superior authorization control information to obtain a descrambling control word.

Step 307, descrambling the received upper level program by using the descrambling control word;

and 308, displaying the descrambled upper-level program.

In this embodiment, in step 304, if it is determined that the upper level program corresponding to the program identifier obtains the upper level authorization, the authorization control information is not processed, and it is prompted that the program is not authorized.

In this embodiment, in step 305, if the determination result is that the lower level authorization is not obtained, no processing is performed on the authorization control information, and the program is prompted to be prohibited.

In the present embodiment, in the two-stage conditional access system:

the upper conditional receiving system scrambles the upper program and transmits the upper program to the lower conditional receiving system; the lower conditional access system receives the upper program transmitted by the upper conditional access system, and directly transmits the upper program to the lower user terminal without processing. In this way, the subordinate user terminal can descramble the superior program by using the obtained descrambling control word, so that the user can watch the superior program.

In this embodiment, in the two-stage conditional access system, the upper-level program may be authorized respectively, and the upper-level and lower-level authorization management information may be sent to the lower-level user terminal, so that the lower-level user terminal obtains the corresponding upper-level and lower-level authorization management information, which is specifically shown in fig. 4.

Thus, as shown in fig. 4, the following steps may be included at the front end:

in step 401, a subordinate user subscribes to a superior program, and at this time, the subordinate user can subscribe to the superior program by telephone or by going to a subordinate business hall.

In this embodiment, the subscription request may be transmitted through a lower level user management unit.

At the lower level:

in step 402, the subordinate conditional access system may generate corresponding subordinate authorization management information according to the subscription request, where the subordinate authorization management information includes a security device number and corresponding feature information of the subordinate user terminal. The characteristic information may be any characteristic value of the ue or information such as a used attribute value. For example, when the feature information is any feature value, the lower conditional access system may set a feature value 3 of the secure device, that is, "CHR 3 ═ 0x 80000000", and at this time, the lower conditional access system may generate a corresponding EMM packet, which may include the secure device number of the lower user terminal and a corresponding feature value, such as "CHR 3 ═ 0x 80000000".

In this embodiment, the lower level entitlement management message may be a lower level EMM packet.

In step 403, the subordinate conditional access system transmits the generated subordinate EMM packet to a subordinate user terminal.

At an upper level:

in step 404, the upper conditional access system may receive a subscription request for subscribing to the upper program from a lower subscriber management unit through the VPN network.

Step 405, generating superior authorization management information according to the order request, wherein the superior authorization management information comprises a program identifier and a product key.

In this embodiment, the upper layer entitlement management message may be an upper layer EMM packet.

In step 406, the upper conditional access system may send the upper EMM packet to the lower subscriber terminal. The network can be sent to the subordinate user terminal through the subordinate conditional access system, or can be directly sent to the subordinate user terminal through the network.

In the following level of user terminals:

step 407, receiving the subordinate entitlement management message, i.e. the subordinate EMM packet, of the superior program ordered by the subordinate user, which is sent by the subordinate conditional access system.

In step 408, the lower EMM packet is processed, and in this embodiment, the lower EMM packet may be processed by using the user key to obtain the feature information of the lower user terminal, that is, "CHR 3 ═ 0x 80000000".

In step 409, the feature information is stored. Therefore, when the subordinate user terminal receives the ECM data packet and judges whether the superior program obtains subordinate authorization, whether the broadcast prohibiting expression is met can be judged according to the stored characteristic information, and if the broadcast prohibiting expression is not met, the terminal user can watch the superior program.

Step 410, receiving superior EMM data of superior program ordered by inferior user sent by superior condition receiving system, the superior EMM data packet includes program identification and product key;

step 411, the higher EMM packet may be processed by using the user key to obtain the program identifier and the product key corresponding to the higher program.

At step 412, the program identifier and the product key are stored.

In steps 407 to 412, the processing of the upper EMM packet and the lower EMM packet may be performed simultaneously or sequentially, or may be performed according to specific situations, and the above flow is only an embodiment of the present invention.

In this embodiment, after obtaining the subordinate and superior authorization of the superior program, the subordinate user terminal may process the superior program, so that the user views the superior program.

In addition, in this embodiment, the process of the subordinate user terminal viewing the subordinate program is similar to the prior art, and is not described herein again.

Example 4

An embodiment of the present invention further provides a viewing control apparatus, as shown in fig. 5, the apparatus includes an upper conditional access system 501 and a lower conditional access system 502; the upper conditional access system 501 includes an authorization control information generating unit 501b and an authorization control information transmitting unit 501 c; the authorization control information generating unit 501b is configured to generate upper-level authorization control information corresponding to the upper-level program, where the authorization control information includes a program identifier, a playing attribute, and an encrypted descrambling control word; the authorization control information sending unit 501c is configured to send the authorization control information to a subordinate user terminal.

In this embodiment, the device can be used alone, or can be used in combination with a two-stage conditional access system, and can be used according to actual conditions. The working process of the device is as described in embodiment 1, and is not described herein again.

It can be seen from the above that, the device can configure the playing attribute of the superior program, generate the corresponding ECM packet, and transmit the ECM packet to the subordinate user terminal, so that the subordinate user terminal can process the superior program only when the superior program obtains the authorization of the superior CAS and the subordinate CAS at the same time to obtain the descrambling control word, so that the user can watch the superior program, thereby effectively ensuring the benefits of the inferior network operator and the superior network operator, and the method is simple to implement and has low cost.

Example 5

The present invention provides a viewing control apparatus, as shown in fig. 6, the apparatus includes an authorization control information receiving unit 601, an information processing unit 602, and a decryption unit 603; the authorization control information receiving unit 601 is configured to receive upper level authorization control information sent by an upper level conditional access system, where the upper level authorization control information includes a program identifier, a play attribute, and an encrypted descrambling control word; the information processing unit 602 is configured to determine whether the program corresponding to the program identifier obtains upper and lower level authorization; if the processing result of the information processing unit is yes, the decryption unit 603 is configured to decrypt the upper level entitlement control message to obtain a descrambling control word.

In this embodiment, the apparatus may further include a descrambling unit 604 and a display unit 605; wherein, the descrambling unit 604 is configured to descramble the upper level program received through the lower level conditional access system using the descrambling control word; the display unit 605 is used to display the descrambled program.

Thus, after the descrambling control word is obtained, the descrambling control word can be used for descrambling the superior program received by the user terminal, so that the user can watch the descrambled program.

In this embodiment, the information processing unit 602 may include a first judging unit and a second judging unit; the first judging unit is used for judging whether a product key of a superior program corresponding to the program identifier exists or not; if the judgment result of the first judgment unit is present, the second judgment unit is used for judging whether the audience rating condition is met according to the playing attribute; if the determination result is yes, the decryption unit 603 is notified to decrypt the upper-level authorization control information. The specific determination process is as described in embodiment 3, and is not described herein again.

The device can be used independently, and can also be used together with a user terminal according to actual conditions. The working process of the device is as described in embodiment 2, and is not described herein again.

Example 6

The embodiment of the present invention further provides a viewing control apparatus, which is described in detail below with reference to fig. 7 by taking a two-stage conditional access system and a subordinate user terminal as an example.

In a two-stage conditional access system:

as shown in fig. 7, the apparatus includes an upper conditional access system 501 and a lower conditional access system 502. The upper conditional access system 501 includes a configuration unit 501a, an authorization control information generation unit 501b, and an authorization control information transmission unit 501c, where the configuration unit 501a is configured to configure the playing attribute of an upper program, and the functions of the authorization control information generation unit 501b and the authorization control information transmission unit 501c are as described in embodiment 4, and are not described herein again.

In addition, the upper conditional access system 501 may further include a storage unit 709 for storing the configured playing attributes. At this time, the ECM data may be generated by the ECM generation unit 501b according to the stored playback attributes.

In the present embodiment, as shown in fig. 7, the upper conditional access system 501 further includes an upper multiplexing/scrambling unit 701 for scrambling the upper program and transmitting the scrambled upper program to a lower conditional access system. In this embodiment, the upper multiplexing/scrambling unit 701 may be incorporated with a multiplexer through which an upper program is transmitted to the lower conditional access system. And the entitlement control information transmitting unit 501c is used in combination with the upper multiplexing/scrambling unit 701, and transmits the EMC packet using the upper multiplexing/scrambling unit 701 (the entitlement control information transmitting unit 501c is not shown in fig. 7).

The lower conditional access system 502 further includes a lower multiplexing/scrambling unit 702, and the lower multiplexing/scrambling unit 702 is configured to receive the scrambled upper program transmitted by the upper multiplexing/scrambling unit 701 and transmit the scrambled upper program to a lower user terminal. In this embodiment, the lower multiplexing/scrambling unit 702 may be incorporated with a multiplexer through which an upper program is transmitted to the lower user terminal.

As shown in fig. 7, the lower conditional access system 502 further includes a lower entitlement management message generation unit (lower EMMG)703 and a lower entitlement management message transmission unit (lower EMMS) 704; wherein,

the subordinate EMMG 703 is configured to generate subordinate authorization management information corresponding to a superior program according to a subscription request of the superior program subscribed by a subordinate user, where the subordinate authorization management information includes a number of a security device of the subordinate user terminal and corresponding feature information; the lower EMMS 704 is configured to transmit the lower entitlement management message to the user terminal.

In this embodiment, the lower subscriber management unit 705 may be employed to subscribe to the upper level program and transmit a subscription request to perform lower level authorization for the upper level program according to a lower level user request.

Further, the lower subscriber management unit 705 may be further adapted to transmit the subscription request to the upper subscriber management unit 706 through the VPN network, and the upper subscriber management unit 706 transmits the subscription request to the upper conditional access system.

As shown in fig. 7, the upper conditional access system 501 further includes an upper entitlement management information generation unit 707 and an upper entitlement management information transmission unit 708; the upper EMMG 707 is configured to generate upper entitlement management information, that is, an upper EMM data packet, according to the received subscription request, where the upper EMM data packet includes a program identifier and a product key. The upper EMMS 708 is used to transmit the upper EMM packet to the lower subscriber terminal.

In the present embodiment, at the upper stage: when the upper EMM packet is transmitted to the lower subscriber terminal, the upper EMMs 708 may transmit the upper EMM packet to the lower conditional access system 502 through the upper multiplexing/scrambling unit 701, and then transmit the upper EMM packet to the lower subscriber terminal through the lower multiplexing/scrambling unit 702, but is not limited thereto, and may also directly transmit the upper EMM packet to the lower subscriber terminal through the network.

In addition, the ECMS 501c may transmit the upper ECM packet to the lower conditional access system 502 through the upper multiplexing/scrambling unit 701, and then transmit the upper ECM packet to the lower user terminal through the lower multiplexing/scrambling unit 702. But not limited thereto, the upper ECM packet may be directly transmitted to the lower subscriber terminal through the network.

In the following level of user terminals:

the apparatus includes an authorization control information receiving unit 601, an information processing unit 602, a decryption unit 603, a descrambling unit 604, and a display unit 605, and the functions thereof are similar to those of embodiment 4, and are not described herein again.

As shown in fig. 8, the subordinate user terminal further includes a first receiving unit 801 and a first processing unit 802; the first receiving unit 801 is configured to receive a higher EMM data packet of a higher program ordered by a lower user and sent by the higher conditional access system, where the higher EMM data packet includes a program identifier and a product key; the first processing unit 802 is configured to process the higher EMM packet to obtain a product key corresponding to the higher program.

In this embodiment, the processing of the upper EMM packet means: and decrypting the EMM data packet by using a prestored user key to obtain a product key corresponding to the superior program.

As shown in fig. 8, the subordinate user terminal further includes a second receiving unit 803 and a second processing unit 804; the second receiving unit 803 is configured to receive a subordinate EMM packet of a subordinate program ordered by a subordinate user, which is sent by a subordinate conditional access system, where the subordinate EMM packet includes the feature information. The second processing unit 804 is configured to process the lower EMM packet to obtain the feature information.

In this embodiment, the processing of the lower EMM packet means: the EMM packet is decrypted using a pre-stored user key to obtain the characteristic information.

As shown in fig. 8, the lower user terminal further includes a storage unit 805, where the storage unit 805 is used to store a product key and feature information corresponding to the upper program. Thus, when the information processing unit 502 processes the received upper ECM packet, it can determine whether the upper program obtains the lower and upper authorization according to the information stored in the storage unit 805, and the specific determination method is as described in embodiment 3, and is not described herein again.

In this embodiment, the viewing control apparatus is described by taking a two-stage conditional access system and a subordinate user terminal as an example, and a specific workflow is described in embodiment 3 and will not be described herein again.

It can be seen from the above that, the play attribute of the superior program can be configured in the superior conditional access system, and the corresponding ECM packet is generated and transmitted to the subordinate user terminal, so that the subordinate user terminal can process the superior program to obtain the descrambling control word only when the superior program obtains the dual authorization of the superior CAS and the subordinate CAS at the same time, so that the user can watch the superior program, thereby effectively ensuring the benefits of the inferior network operator and the superior network operator, and the method is simple to implement and has low cost.

The above-mentioned embodiments are intended to illustrate the objects, technical solutions and advantages of the present invention in further detail, and it should be understood that the above-mentioned embodiments are merely exemplary embodiments of the present invention, and are not intended to limit the scope of the present invention, and any modifications, equivalent substitutions, improvements and the like made within the spirit and principle of the present invention should be included in the scope of the present invention.

Claims

1. A viewing control method, the method comprising:

a subordinate user terminal receives superior authorization control information sent by a superior conditional access system, wherein the superior authorization control information comprises a program identifier, a playing attribute and an encrypted descrambling control word;

judging whether the upper-level program corresponding to the program identifier obtains the authorization of the upper level and the lower level;

if the judgment result is yes, the subordinate user terminal decrypts the superior authorization control information to obtain the descrambling control word.

2. The method of claim 1, further comprising:

descrambling the superior program received through a subordinate conditional access system by using the descrambling control word;

and displaying the upper-level program after descrambling.

3. The method of claim 1, wherein the determining whether the upper level program corresponding to the program identifier obtains upper level and lower level authorization comprises:

judging whether a product key of a superior program corresponding to the program identifier exists or not;

if the judgment result is yes, determining to obtain the upper-level authorization, and further judging whether the viewing condition is met according to the playing attribute and the pre-stored characteristic information;

and if the judgment result is satisfied, determining to obtain the authorization of the lower level.

4. The method of claim 1, wherein before the subordinate user terminal receives the superior authorization control information sent by the superior conditional access system, the method further comprises:

receiving superior authorization management information of superior programs ordered by subordinate users, which is sent by the superior conditional access system, wherein the superior authorization management information comprises program identifiers and product keys;

and processing the superior authorization management information to obtain a product key corresponding to the superior program.

5. The method of claim 1, wherein before the subordinate user terminal receives the authorization control information sent by the superior conditional access system, the method further comprises:

receiving subordinate authorization management information of a superior program ordered by a subordinate user, which is sent by a subordinate conditional access system, wherein the subordinate authorization management information comprises the number of a safety device of a subordinate user terminal and corresponding characteristic information;

and processing the lower authorization management information to obtain the characteristic information.

6. A viewing control apparatus, comprising:

the system comprises an authorization control information receiving unit, a condition control information receiving unit and a condition control information transmitting unit, wherein the condition control information receiving unit is used for receiving superior authorization control information sent by a superior condition receiving system, and the superior authorization control information comprises a program identifier, a playing attribute and an encrypted descrambling control word;

the information processing unit is used for judging whether the superior program corresponding to the program identifier obtains the authorization of superior and subordinate;

and the decryption unit is used for decrypting the superior authorization control information to obtain a descrambling control word if the processing result of the information processing unit is positive.

7. The apparatus of claim 6, further comprising:

a descrambling unit for descrambling a superior program received through a subordinate conditional access system using the descrambling control word;

and the display unit is used for displaying the descrambled superior program.

8. The apparatus of claim 6, wherein the processing unit comprises:

the first judging unit is used for judging whether a product key of a superior program corresponding to the program identifier exists or not;

the second judging unit is used for judging whether the audience rating condition is met according to the playing attribute and the pre-stored characteristic information if the judging result of the first judging unit is existence; and if the judgment result is satisfied, informing the decryption unit to decrypt the superior authorization control information.

9. The apparatus of claim 6, further comprising:

the first receiving unit is used for receiving superior authorization management information of superior programs ordered by subordinate users, which is sent by the superior conditional access system, and the superior authorization management information comprises program identifiers and product keys;

the first processing unit is used for processing the superior authorization management information to obtain a product key corresponding to the superior program.

10. The apparatus of claim 6, further comprising:

a second receiving unit, configured to receive subordinate authorization management information of a superior program ordered by a subordinate user, where the subordinate authorization management information is sent by a subordinate conditional access system and includes a number of a security device of the subordinate user terminal and corresponding feature information;

a second processing unit, configured to process the lower authorization management information to obtain the feature information.

11. The apparatus of claim 9 or 10, further comprising:

and the storage unit is used for storing the product key and the characteristic information corresponding to the superior program.

12. A viewing control method, the method comprising:

generating superior authorization control information corresponding to a superior program, wherein the superior authorization control information comprises a program identifier, a preset playing attribute and an encrypted descrambling control word;

and sending the upper authorization control information to a lower user terminal.

13. The method of claim 12, further comprising:

a subordinate conditional access system generates subordinate authorization management information corresponding to a superior program according to an order request of a subordinate user for ordering the superior program, and sends the subordinate authorization management information to a subordinate user terminal, wherein the subordinate authorization management information comprises the number of a safety device of the subordinate user terminal and corresponding characteristic information;

the superior condition receiving system generates superior authorization management information according to an order request of a subordinate user for ordering superior programs and sends the superior authorization management information to the subordinate user terminal, wherein the superior authorization management information comprises program identifiers and product keys.

14. The method of claim 12, further comprising:

the upper conditional receiving system sends the scrambled upper program to a lower conditional receiving system;

and the subordinate conditional access system transmits the scrambled superior program to a subordinate user terminal.

15. The method of claim 12, further comprising:

the superior condition receiving system configures the playing attribute of the superior program;

and storing the playing attribute.

16. A viewing control apparatus, comprising: a superior conditional access system and an inferior conditional access system; wherein,

the upper conditional access system includes:

the device comprises an authorization control information generating unit, a receiving unit and a processing unit, wherein the authorization control information generating unit is used for generating upper-level authorization control information corresponding to an upper-level program, and the authorization control information comprises a program identifier, a preset playing attribute and an encrypted descrambling control word;

and the authorization control information sending unit is used for sending the authorization control information to a lower-level user terminal.

17. The apparatus of claim 16, wherein the subordinate conditional access system comprises:

a subordinate authorization management information generating unit, configured to receive an order request from a subordinate user for ordering a superior program, and generate subordinate authorization management information corresponding to the superior program according to the order request, where the subordinate authorization management information includes a number of a security device of the subordinate user terminal and corresponding feature information;

a subordinate authorization management information transmitting unit configured to transmit the subordinate authorization management information to the subordinate user terminal.

18. The apparatus of claim 17, wherein the superordinate conditional access system further comprises:

the superior authorization management information generating unit is used for generating superior authorization management information according to the ordering request, and the superior authorization management information comprises a program identifier and a product key;

a superior authorization management information sending unit, configured to send the superior authorization management information to the subordinate user terminal.

19. The apparatus of claim 16, wherein the upper conditional access system further comprises an upper scrambling unit for scrambling the upper program and transmitting the scrambled upper program to a lower conditional access system;

the lower conditional access system further comprises a lower scrambling unit, wherein the lower scrambling unit is used for receiving the scrambled upper program transmitted by the upper scrambling unit and transmitting the scrambled upper program to a lower user terminal.

20. The apparatus of claim 16, wherein the superordinate conditional access system further comprises:

the configuration unit is used for configuring the playing attribute of the superior program;

and the storage unit is used for storing the playing attribute.