KR102668741B1 - System for transmitting and validating data to prevent of hacking using hdmi - Google Patents

Abstract

An object of the present invention is to provide a data transmission and verification system for preventing hacking using HDMI. A data transmission and verification system for preventing hacking using HDMI comprises: a set-top box connected to a content server through a network; and a verification module connected to a display device. The set-top box includes a content receiving unit, an encryption unit, an encoder unit, and a data division unit. The present invention includes a data output unit, a set-top box HDMI output unit, a set-top box control unit, and a set-top box storage unit. The verification module includes a verification module HDMI input unit, a data merging unit, a decoding unit, a decoding unit, a content reproducing unit, a verification module control unit, and a verification module storage unit. According to the present invention, the system for transmitting and verifying data for preventing hacking by using HDMI processes based on a binary value of content, thereby reducing a load of the set-top box.

Description

Data transmission and verification system to prevent hacking using HDMI {SYSTEM FOR TRANSMITTING AND VALIDATING DATA TO PREVENT OF HACKING USING HDMI}

The present invention relates to a data transmission and verification system for hacking prevention using HDMI.

A set-top box (set-top box or set-top unit, STB or STU) is a communication terminal for digital broadcasting that is connected to a display device such as a television (TV), converts signals received from outside, and transmits the contents to the display device. refers to a device that transmits The set-top box functions to transmit and receive content such as broadcast programs and video on demand (VOD) by connecting the TV receiver to the network. It is essential for transmitting and receiving TV content through satellite broadcasting, cable broadcasting service, or IPTV service. It is being used as. The set-top box restores digital compressed signals transmitted from a video server through a digital network to the original video and audio signals.

High Definition Multimedia Interface (hereinafter referred to as 'HDMI') is one of the uncompressed digital video/audio interface standards. HDMI provides an interface between devices such as AV devices, monitors, and digital televisions from multimedia sources such as set-top boxes and DVD players that support HDMI.

Since video, audio, and control signals are transmitted through a single cable, the previously cumbersome wiring of AV devices can be simplified. Additionally, the HDMI connector includes a Consumer Electronics Control (CEC) line, which can be used for integrated control of multiple devices within an AV system.

Recently, there has been an increasing trend in advertisements using display devices connected to set-top boxes. Compared to conventional still image advertisements, video advertisements have the advantage of being easy to replace advertisements and providing different advertisements for each time period. However, in the case of set-top boxes, they are easily exposed to hacking because they are directly connected to the network, and there is a problem in that unintended images, etc. may be displayed due to malicious attacks by hackers.

Accordingly, in the present invention, a verification module that is not connected to the Internet is connected between a set-top box and a display device to prevent hacking by verifying the signal transmitted from the set-top box using HDMI and, if verification is successful, playing the corresponding content on the display device. We present a data transmission and verification system for .

The purpose of the present invention is to provide a data transmission and verification system to prevent hacking using HDMI, which verifies signals transmitted from a set-top box using HDMI and, if verification is successful, can play the corresponding content on a display device.

In addition, the purpose of the present invention is to provide a data transmission and verification system that verifies signals transmitted from a set-top box using HDMI and controls content playback on a display device when a failure occurs or is being inspected for maintenance. .

The data transmission and verification system for preventing hacking using HDMI according to an embodiment of the present invention includes a set-top box connected to a content server through a network and a verification module connected to a display device, and the set-top box includes a content receiving unit, an encryption unit, and an encoder unit. , data partition. It includes a data output unit, set-top box HDMI output unit, set-top box control unit, and set-top box storage unit, and the verification module includes a verification module HDMI input unit, data merge unit, decoder unit, decoder unit, content playback unit, verification module control unit, and verification module storage unit. A content receiving unit receives content from a content server, an encryption unit encrypts the content received from the content receiving unit to generate binary data, an encoder unit encodes the binary data into text data, and a data division unit encodes the encoded text data. splits to a preset length to generate split text data, the data output unit outputs the split text data, and the set-top box HDMI output unit converts the output split text data into the HDMI standard and transmits the converted data to the verification module. The verification module HDMI input unit receives conversion data transmitted from the set-top box HDMI output unit and converts it into split text data, the data merging unit merges the split text data to generate text data, and the decoder unit decodes the text data into binary data. , the decryption unit decrypts the binary data to decrypt the content, and the content playback unit plays the decrypted content.

The data transmission and verification system for preventing hacking using HDMI according to the present invention verifies the signal transmitted using HDMI from the set-top box and allows the content to be played on the display device only when verification is successful, thereby strengthening security. There is an effect.

In addition, the data transmission and verification system for hacking prevention using HDMI according to the present invention has the effect of reducing the load on the set-top box because it processes based on the binary value of the content.

In addition, the data transmission and verification system for preventing hacking using HDMI according to the present invention can process content of various sizes and has the effect of performing verification even on data for which a screen does not exist.

In addition, the data transmission and verification system for hacking prevention using HDMI according to the present invention has the effect of strengthening security because the verification module is not directly connected to the Internet.

Figure 1 shows the configuration of a data transmission and verification system for hacking prevention using HDMI according to an embodiment of the present invention.
Figure 2 shows the configuration of a set-top box of a data transmission and verification system for hacking prevention using HDMI according to an embodiment of the present invention.
Figure 3 shows the configuration of a verification module of a data transmission and verification system for hacking prevention using HDMI according to an embodiment of the present invention.
Figure 4 shows an example of converting data into binary data in a set-top box of a data transmission and verification system for hacking prevention using HDMI according to an embodiment of the present invention.
Figure 5 is a flowchart of a data transmission and verification method to prevent hacking using HDMI according to an embodiment of the present invention.

Specific structural or functional descriptions of the embodiments according to the concept of the present invention disclosed in this specification are merely illustrative for the purpose of explaining the embodiments according to the concept of the present invention. They may be implemented in various forms and are not limited to the embodiments described herein.

Since the embodiments according to the concept of the present invention can make various changes and have various forms, the embodiments will be illustrated in the drawings and described in detail in this specification. However, this is not intended to limit the embodiments according to the concept of the present invention to specific disclosed forms, and includes all changes, equivalents, or substitutes included in the spirit and technical scope of the present invention.

Terms such as first or second may be used to describe various components, but the components should not be limited by the terms. The above terms are used only for the purpose of distinguishing one component from another component, for example, without departing from the scope of rights according to the concept of the present invention, a first component may be named a second component and similarly a second component The component may also be named a first component.

When a component is said to be "connected" or "connected" to another component, it is understood that it may be directly connected to or connected to that other component, but that other components may also exist in between. It should be. On the other hand, when it is mentioned that a component is “directly connected” or “directly connected” to another component, it should be understood that there are no other components in between. Other expressions that describe the relationship between components, such as "between" and "immediately between" or "neighboring" and "directly adjacent to" should be interpreted similarly.

The terms used in this specification are only used to describe specific embodiments and are not intended to limit the invention. Singular expressions include plural expressions unless the context clearly dictates otherwise. In this specification, terms such as “comprise” or “have” are intended to designate the presence of features, numbers, steps, operations, components, parts, or combinations thereof described in this specification, but are not intended to indicate the presence of one or more other features. It should be understood that it does not exclude in advance the existence or possibility of addition of elements, numbers, steps, operations, components, parts, or combinations thereof.

Unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by a person of ordinary skill in the technical field to which the present invention pertains. Terms as defined in commonly used dictionaries should be interpreted as having meanings consistent with the meanings they have in the context of the related technology, and unless clearly defined in this specification, should not be interpreted in an idealized or overly formal sense. No.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings attached to this specification.

Figure 1 is a configuration diagram of a data transmission and verification system for hacking prevention using HDMI according to an embodiment of the present invention, and Figure 2 is a data transmission and verification system for hacking prevention using HDMI according to an embodiment of the present invention. This is a configuration diagram of the set-top box of the system, and Figure 3 is a configuration diagram of the verification module of the data transmission and verification system for hacking prevention using HDMI according to an embodiment of the present invention.

Referring to FIG. 1, the data transmission and verification system 10 according to an embodiment of the present invention includes a set-top box 100 connected to a server 400 through a network, and a verification module 200 connected to a display device. Here, the network refers to a wired/wireless short-distance and wide-area data transmission/reception network capable of transmitting/receiving predetermined data.

The set-top box 100 may be a variety of source devices such as a set-top box, smart box, computer, and DVD player, and the display device 300 may be an output device such as a TV, smart TV, or monitor. The set-top box 100 and the display Device 300 is not limited to this.

Referring to FIG. 2, the set-top box 100 includes a content receiving unit 110, an encryption unit 120, an encoder unit 130, and a data division unit 140. It includes a data output unit 150, an HDMI output unit 160, a control unit 180, and a storage unit 190.

The content receiving unit 110 of the set-top box 100 receives content from the server 400. You can receive content over a wired or wireless network. For example, communication can be performed using a wired communication method or a wireless communication method such as Bluetooth, WiFi, 3G (generation), or LTE (Long Term Evolution).

The encryption unit 120 of the set-top box 100 encrypts the content received from the content reception unit 110. The encrypted data is binary data, and may be hex (hexadecimal)-based binary data (see FIG. 4). The encryption unit 120 of the set-top box 100 can encrypt plaintext into ciphertext using a symmetric key encryption algorithm using an encryption key shared with the verification module 200, but the encryption method is not limited to this.

The encoder unit 130 of the set-top box 100 encodes binary data into text data. The encoder unit 130 can encode binary data into text data using various methods. For example, the encoder unit 130 according to an embodiment of the present invention can encode binary data into text data using Base64. For example, in the case of Base64, because it is based on 64 texts, when combining 8x8 pixels horizontally and vertically based on 64 colors, 129,600 (=480×270) texts can be expressed per screen at 4k resolution.

The data division unit 140 of the set-top box 100 divides the encoded text data into a preset length, and the data output unit 150 of the set-top box 100 outputs the divided data in order. At this time, the screen may be reproduced at a speed synchronized with the data verification module 200 (for example, 10fps).

The data output unit 150 of the set-top box 100 outputs data to the verification module 200 using the HDMI output unit 160.

The HDMI output unit 160 can synthesize video signals and audio signals according to the HDMI standard and output the signals in a format that can be transmitted through HDMI communication. At this time, the video signal is transmitted without compression, and the video signal and audio signal can be transmitted together with a single cable.

The set-top box 100 may be configured to include at least one control unit 180, a storage unit 190, and a communication unit. For example, the at least one control unit 180 may be a central processing unit (CPU), a graphics processing unit (GPU), or a dedicated processor on which methods according to embodiments of the present invention are performed. It can mean. The storage unit 190 may be comprised of at least one of a volatile storage medium and a non-volatile storage medium. For example, the storage may be read only memory (ROM) or random access memory (RAM), or flash memory, hard disk drive (HDD), or solid state drive (SSD). , or various memory cards (for example, micro SD cards). Additionally, the communication unit may perform communication through a wired or wireless network.

The storage unit 190 of the set-top box 100 may store at least one command performed by the control unit 180, and the at least one command may be executed to perform at least some operations of the data verification method using HDMI, which will be described later. there is.

Referring to FIG. 3, the verification module 200 includes a data merge unit 210, a decoder unit 220, a decryption unit 230, a content playback unit 240, an HDMI input unit 250, and an HDMI output unit 260. , includes a control unit 280 and a storage unit 290.

The HDMI input unit 250 of the verification module 200 receives data transmitted from the HDMI output unit 160 of the set-top box 100.

The data merge unit 210 of the verification module 200 converts the divided and received data into text data and merges them. For example, the screen transmitted from the set-top box 100 can be merged by analyzing color values in blocks and converting them into base64 text data.

The decoder unit 220 of the verification module 200 decodes the text file into binary data. For example, after data transmission from the set-top box 100 to the verification module 200 is completed, base64 text data can be converted to binary data.

The decryption unit 230 of the verification module 200 decrypts the binary data and decrypts the content. Decrypted content can be stored in the storage unit 290. The decryption unit 230 of the verification module 200 may decrypt the ciphertext into plaintext using a symmetric key encryption algorithm using an encryption key shared with the set-top box 100, but the decryption method is not limited to this.

The content playback unit 240 of the verification module 200 plays the decrypted content.

The HDMI output unit 260 of the verification module 200 outputs content data to the display device 300 according to the HDMI standard. At this time, if the verification module 200 is a module included in the display device 300, the HDMI output unit 260 can be omitted.

The verification module 200 may be configured to include at least one control unit 280, a storage unit 290, and a communication unit. For example, the at least one control unit 280 may be a central processing unit (CPU), a graphics processing unit (GPU), or a dedicated processor on which methods according to embodiments of the present invention are performed. It can mean. The storage unit 290 may be comprised of at least one of a volatile storage medium and a non-volatile storage medium. For example, the storage may be read only memory (ROM) or random access memory (RAM), or flash memory, hard disk drive (HDD), or solid state drive (SSD). , or various memory cards (for example, micro SD cards). Additionally, the communication unit may perform communication through a wired or wireless network.

For example, the storage unit 290 of the verification module 200 may store at least one command performed by the control unit 280, and the at least one command may perform at least some operations of the data verification method using HDMI, which will be described later. It can be executed to be performed. Additionally, the storage unit 290 may store content decrypted by the decryption unit 230.

Figure 5 is a flowchart of a data transmission and verification method to prevent hacking using HDMI according to an embodiment of the present invention. The data transmission and verification method for preventing hacking using HDMI according to an embodiment of the present invention includes a preprocessing step (S100), a new content receiving step (S210), a content encryption step (S220), and an encrypted content encoding and splitting step ( S230), screen output data generation step based on division (S240), playback and HDMI output step of the generated screen at a specific speed (S250), HDMI input step (S310), division reference text generation step (S320), binary after text combination It includes a conversion step (S330), a binary data decoding and content storage step (S340), and a content playback step (S350).

First, a preprocessing step (S100) is performed in which content is encrypted and transmitted from the set-top box 100, and the verification module 200 that receives it shares an encryption key for decryption. For example, the set-top box 100 and the verification module 200 can share a secret key, and can encrypt plaintext into ciphertext and decrypt ciphertext into plaintext using a symmetric key encryption algorithm. At this time, depending on the encryption method, set the same encryption key text in the set-top box 100 and verification module 200, copy the same encryption key file using USB memory, or physically connect and use an offline key distribution method. Encryption keys can be shared. The encryption and decryption method between the set-top box 100 and the verification module 200 is not limited to this.

Next, the set-top box 100 receives new content from the server 400 (S210). You can receive content over a wired or wireless network.

The set-top box 100 encrypts the received content (S220). Content can be encrypted using an encryption key shared with the verification module 200, and the encrypted data is binary data and may be hex-based binary data.

The set-top box 100 encodes and divides binary data into text data (S230). As mentioned above, various encoding methods can be used, and the set-top box 100 according to an embodiment of the present invention can encode binary data into text data using Base64 and then divide it into a preset length. there is.

Next, the set-top box 100 generates screen output data based on the segmented text data (S240). For example, in the case of base64, since it is based on 64 texts, when combining 8x8 pixels horizontally and vertically based on 64 colors, 129,600 (=480×270) texts can be expressed per screen at 4k resolution.

The set-top box 100 reproduces the generated screen output data at a specific speed and transmits it to the verification module 200 using HDMI (S250). At this time, the screen may be reproduced at a speed synchronized with the data verification module 200 (for example, 10fps).

Next, the verification module 200 receives data from the set-top box 100 using HDMI (S310) and converts it into text data based on the divided and received data (S320). For example, the verification module 200 may analyze color values of the screen transmitted from the set-top box 100 on a block basis and convert it into base64 text data.

Next, the verification module 200 merges the converted segmented text data and decodes it into binary data (S330). For example, base64 text data can be converted to binary data.

The verification module 200 decrypts the binary data, decrypts the content, and stores it (S340). For example, content can be decrypted and stored using an encryption key previously shared with the set-top box 100.

The verification module 200 plays the decrypted content (S350). For example, if verification is successful, that is, if content decryption is successful, the verification module 200 can play the content and output the decrypted content to the display device 300 using HDMI. In contrast, the verification module 200 does not play the content received from the set-top box 100 when verification fails, for example, when content decryption fails, an error occurs, or is under inspection for maintenance. For example, when verification fails, the verification module 200 may output image data related to the verification failure that is previously stored in the verification module 200.

Further scope of applicability of the present invention will become apparent from the detailed description that follows. However, since various changes and modifications within the spirit and scope of the present invention may be clearly understood by those skilled in the art, the detailed description and specific embodiments, such as preferred embodiments of the present invention, should be understood as being given by way of example only.

The features and effects of the present invention described above will become more apparent through the following detailed description in conjunction with the accompanying drawings, and accordingly, those skilled in the art will be able to easily implement the technical idea of the present invention. You will be able to.

The present invention can make various changes and have various embodiments, and specific embodiments will be illustrated in the drawings and described in detail in the detailed description. However, this is not intended to limit the present invention to specific embodiments, and should be understood to include all changes, equivalents, and substitutes included in the spirit and technical scope of the present invention.

According to software implementation, the procedures and functions described in this specification, as well as design and parameter optimization for each component, can be implemented as separate software modules. Software code can be implemented as a software application written in an appropriate programming language. The software code may be stored in memory and executed by a controller or processor.

Claims (7)

In a data transmission and verification system to prevent hacking using HDMI, which includes a verification module connected to a content server, a set-top box connected to a network, and a display device,
The set-top box includes a content receiving unit, an encryption unit, an encoder unit, and a data division unit. It includes a data output unit, a set-top box HDMI output unit, a set-top box control unit, and a set-top box storage unit,
The verification module includes a verification module HDMI input unit, a data merging unit, a decoder unit, a decoding unit, a content playback unit, a verification module control unit, and a verification module storage unit,
The content receiving unit receives content from the content server,
The encryption unit encrypts the content received from the content receiver to generate binary data,
The encoder unit encodes the binary data into text data,
The data division unit divides the encoded text data into a preset length to generate segmented text data,
The data output unit outputs the split text data,
The set-top box HDMI output unit transmits conversion data obtained by converting the output segmented text data into the HDMI standard to the verification module,
The verification module HDMI input unit receives the converted data transmitted from the set-top box HDMI output unit and converts it into the split text data,
The data merge unit merges the split text data to generate the text data,
The decoder unit decodes the text data into the binary data,
The decryption unit decrypts the binary data and decrypts the content,
A data transmission and verification system for hacking prevention using HDMI, wherein the content playback unit plays the decrypted content. According to paragraph 1,
The encoder of the set-top box encodes the binary data into the text data using Base64,
The decoder of the verification module decodes the text data into the binary data using Base64. A data transmission and verification system for preventing hacking using HDMI. According to paragraph 2,
The encryption unit of the set-top box encrypts the content into the hex-based binary data using an encryption key shared with the verification module,
The decryption unit of the verification module decrypts the binary data into the content using the encryption key,
A data transmission and verification system for preventing hacking using HDMI, wherein the verification module storage unit of the verification module stores the decrypted content. According to paragraph 3,
A data transmission and verification system for preventing hacking using HDMI, wherein the data output unit outputs the segmented text data in the order in which it is segmented, and outputs a playback screen at a speed synchronized with the verification module. In a data transmission and verification method to prevent hacking using HDMI, which includes a verification module connected to a set-top box and display device connected to a content server and a network,
(a) the set-top box receiving content from the content server;
(b) the set-top box encrypting the content to generate binary data;
(c) the set-top box encoding the binary data into text data;
(d) the set-top box dividing the text into a preset length to generate segmented text data;
(e) outputting the segmented text data by the set-top box;
(f) the set-top box transmitting converted data obtained by converting the segmented text data into the HDMI standard to the verification module using HDMI;
(g) the verification module receiving the converted data using HDMI and converting the converted data into the segmented text data;
(h) the verification module merging the split text data to generate the text data;
(i) the verification module decoding the text data into the binary data;
(j) the verification module decrypts the binary data and decrypts the content; and
(k) A data transmission and verification method for preventing hacking using HDMI, comprising the step of having the verification module play the content. According to clause 5,
The set-top box encrypts the content into the hex-based binary data using an encryption key shared with the verification module,
The verification module decrypts the binary data into the content using the encryption key,
A data transmission and verification method for preventing hacking using HDMI, wherein the verification module stores the decrypted content in a storage unit of the verification module. In the data transmission and verification module to prevent hacking using HDMI connected to a set-top box and display device that are connected to a content server through a network and receive content from the content server,
The data transmission and verification module includes an HDMI input unit, a data merge unit, a decoder unit, a decoding unit, a content playback unit, a verification module control unit, and a verification module storage unit,
The HDMI input unit encrypts the content in the set-top box and converts it into binary data, encodes the binary data and converts it into text data, divides the text data to generate split text data, and divides the split text data into HDMI. Receive the converted data converted to a standard and transmitted using HDMI and convert it into the split text data,
The data merge unit merges the split text data to generate the text data,
The decoder unit decodes the text data into the binary data,
The decryption unit decrypts the binary data and decrypts the content,
A data transmission and verification module for hacking prevention using HDMI, wherein the content playback unit plays the decrypted content.