TWI393406B - Integrating mobile content sharing and delivery system and its method in integrated network environment - Google Patents

Description

Mobile content sharing and transmission system and method thereof in integrated network environment

The present invention relates to a technology for data transmission in a network environment, and more particularly to a mobile content sharing and transmission system and method thereof in an integrated network environment.

According to today's wireless communication technology and the development of Mobile Handheld Device (MHD), users can easily access the Internet and access many different information services through various mobile networks. From another point of view, many mobile handheld devices are equipped with simple digital camera functions, and even some high-end models can perform multimedia functions such as recording and video recording. Therefore, the mobile handset can not only download multimedia data from the Internet, but the device itself can generate multimedia content. At the same time, with the evolution of storage technology and the increase of capacity, the multimedia content that can be stored on the handheld device is more and more More, more can be used as a "moving information content providing device." When such a situation occurs, the user community naturally has the need to exchange and share content with other mobile devices.

As shown in the first figure, there are usually two or three wireless communication methods in the vicinity of a mobile device. For example, many existing mobile phones usually have wireless local area network, telecommunication network, and Bluetooth communication. Module. Since a handheld device can access different networks at the same time, it is possible to perform different network services on different network interfaces (for example, performing mobile communication functions on the GSM/UMTS interface, and performing web access/multimedia sharing in WiFi). Such services, if these services scattered on different networks can be further integrated into integrated network software that can be executed in multiple network environments, such an integrated network environment will be able to provide us with one A new, ubiquitous information service development space that needs to be developed and has potential.

Suppose there are two mobile device users A and B are under the same wireless network at the same time. User A wants to share some content existing in his device to user B. User A's mobile handheld device will automatically find it first. User B's mobile handset, then communicates with User B's mobile handset, prepares, and begins transmitting data. If user B has to move to another place during the transmission, user A's mobile device will communicate with the server at home (perhaps via mobile, wired or wireless network). User B downloads a particular file, and User A provides User B a specific set of credentials to perform the unfinished download process. Then, after user B leaves, even if users A and B are already in different domains, user B can continue to download content on other networks.

Compared to fixed networks, wireless networks and mobile networks have some different features and weaknesses, as listed below:

1. Low transmission throughput: This inherent limitation makes it necessary for a mobile handset to transmit large amounts of information content for a long time.

2. Limited power: Almost all handheld devices use batteries. Therefore, in order to avoid excessive power consumption, long-distance transmission should be avoided as much as possible.

3. Limited transmission range: In the case of one node, the coverage of PAN or WLAN is usually limited to several or tens of meters. Therefore, when transmitting, the moving distance of the two devices is limited, and it is necessary to maintain transmission within the same network range.

4. Lack of mobility support: Mobile network systems typically only provide support for end device mobility. But for services, cross-network mobility support is needed, which is a challenge for current mobile network systems.

Therefore, the present invention proposes a mobile content sharing and transmission system and method thereof in an integrated network environment to effectively overcome the above problems, and the specific architecture and implementation manner thereof will be described in detail below.

The main object of the present invention is to provide a mobile content sharing and transmission system and method thereof in an integrated network environment, which utilizes a home server to provide asynchronous content transmission technology to allow mobile devices to be in a mixed heterogeneous network. It is limited by the movement and transmission distance, without changing the connection of the network device, file transfer mode and other settings.

Another object of the present invention is to provide a mobile content sharing and delivery system in an integrated network environment that includes three types of asynchronous content delivery services: direct download, redirected download via home server, and subsequent transmission.

A further object of the present invention is to provide a mobile content sharing and delivery system in an integrated network environment, which utilizes a dual key protection mechanism to make the home server believe that the second mobile terminal is a trusted party. The dual key protection mechanism allows the home server and the first mobile terminal as the provider to pre-generate the provider key to ensure the trust relationship between the two, and the home server automatically generates a transaction when the transmission transaction is opened. The key is used to ensure the connection between the home server and the second mobile terminal.

To achieve the above objective, the present invention provides a mobile content sharing and delivery system in an integrated network environment, which includes a first mobile terminal for transmitting information to the Internet; and a home server for temporary storage or storage. The information of the first mobile terminal searches for at least one receiving end of the information to establish a connection between the first mobile terminal and the receiving end; and at least one second mobile terminal serves as the receiving end to receive the data transmitted by the home server.

The present invention further provides a method for secure transmission in an integrated network environment, which is a mechanism for requesting continued transmission when a connection between a first mobile terminal, a home server, and at least a second mobile terminal is interrupted, including the following Step: the home server provides a transmission period to the transmission transaction between the first mobile terminal and the second mobile terminal; the first mobile terminal and the home server pre-generate a provider key; and the second mobile terminal starts to download; The home server automatically generates a transaction key after the transmission transaction begins to protect the connection between the home server and the second mobile terminal.

The purpose, technical content, features and effects achieved by the present invention will be more readily understood by the detailed description of the embodiments.

The present invention provides a mobile content sharing and transmission system and method thereof in an integrated network environment. The first figure shows a block diagram of a mobile content sharing and transmission system in an integrated network environment, including a first mobile terminal 10 The information is transmitted to the home server 12 on the Internet. The home server 12 temporarily stores or stores the information of the first mobile terminal 10, and searches for at least one of the information as the second mobile terminal 14 of the receiving end to establish The connection between the first mobile terminal 10 and the second mobile terminal 14 enables the second mobile terminal 14 to receive the information of the first mobile terminal 10 through the home server 12.

The first mobile terminal 10 and the second mobile terminal 14 use an address layer, a search layer, a description layer, and a control layer in the plug-and-play protocol, where the address is addressed. The layer obtains a network address of each of the first mobile terminal 10 and the second mobile terminal 14. When the first mobile terminal 10 and the second mobile terminal 14 join the network, the addressing layer is configured by a dynamic host (Dynamic Host). Configuration Protocol (DHCP) or an automatic IP mode requires addressing. This automatic IP mode is used when the dynamic host configuration protocol does not exist. The first mobile terminal 10 uses the search layer to adopt a Simple Service Disco Protocol (SSDP). The distributed search mode searches for the second mobile terminal 14 in the small area network; the first mobile terminal 10 and the second mobile terminal 14 periodically broadcast at a predefined location, and use the broadcast message header through the description layer. Prompting one of the first mobile terminal 10 and the second mobile terminal 14 to describe the access location of the file; the control layer is customized by a Simple Object Access Protocol (SOAP). The combination of HTTP and XML technology provides a set of Web service-based messaging and remote control services, so the control layer can provide data exchange and content sharing browsing between the first mobile terminal 10 and the second mobile terminal 14. .

At present, the Plug and Play agreement organization has standardized communication formats of some commonly used devices to ensure normal communication between devices of the same type from different vendors, but the part of the mobile content delivery has not been defined, so the architecture design of the present invention At this stage, the control layer is used to customize a simple communication format to meet the basic meta-data exchange and share content browsing requirements. In addition, although the message standard of the Simple Object Access Protocol is very effective in a reliable network or a small area network, the package information transmitted is too large, which will additionally cause the computing burden of the computer. These conditions make the simple object access protocol not applicable to unreliable wireless network environments, as well as long-distance transmission. Therefore, the present invention implements the action of the plug-and-play protocol control layer on the first mobile terminal and the second mobile terminal. On the communication device instead of the home server, a remote transmission mechanism similar to the Remote Procedure Call (RPC) architecture is proposed to be suitable for mobile devices and home servers in the wide area network. Communicate with each other.

In the asynchronous data transmission part, the present invention designs three basic data downloading services and content directory services, wherein the content directory service considers the native file system of the mobile handheld device to be too simple, and the service is designed to establish the first mobile terminal and the second mobile terminal. On the virtual file system, the shared content is displayed according to the user's needs. All the shared items will generate corresponding meta-data. For example, the virtual file system can create music, video, video and other categories. . In addition, in order to prevent possible security threats, the file access location can be replaced by a string of disturbed strings, and the virtual file system can be referenced back to the identification code of the native file system. The basic file description sample is shown in the code shown in Figure 4. The three asynchronous content transmission methods include:

(1) Direct download service: The second mobile terminal requests the first mobile terminal to provide a list of archive directories that are willing to share, and the second mobile terminal then downloads the specified content directly from the first mobile terminal through a standard HTTP GET method.

(2) Redirecting the download service: the first mobile terminal as the provider can instruct the second mobile terminal as the receiving party to download information from the home server of the first mobile terminal, and the download mode can overcome the transmission distance and Mobile restrictions, maintaining information delivery services. As shown in the second figure, the first mobile terminal 10 stores three files of 1, 2, and 3 in the device, and five files of 1, 2, 3, 4, and 5 are stored in the home server 12. The first mobile terminal 10 may request the home server 12 to share the data of the file. The first mobile terminal 10 determines the list for the download to be provided to the second mobile terminal 14 by comparing with the list requested by the second mobile terminal 14. It is required to download from the home server 12; this illustration shows that only the file 1 is directly delivered by the first mobile terminal 10, although the file 2, 3 also has the first mobile terminal 10, the second mobile terminal 14 can be requested to pass through. The 2, 3, 4, 5 files are downloaded from the home server 12 end of the first mobile terminal 10 in different networks.

(3) Successive transmission service: Since the process of mobile content sharing may encounter disconnection and reconnection, etc., the service is designed to allow the second mobile terminal to continue the transmission service before the transmission deadline has expired, as long as the second mobile terminal If you still have the file location table on the other party's home server, you can continue the unfinished download.

The system architecture of the present invention uses a secure transmission mode with an authorization and authentication mechanism. As shown in the fourth figure, when the first mobile terminal 10 requests to initiate a redirect download, a secure transmission transaction is initiated, and the home server 12 Responsible for managing the process and status of the transaction. The process of this transaction will be assigned a transaction period; this transaction term means the entire transmission transaction process, including: starting from the first mobile terminal 10 notifying the home server 12 and the second mobile terminal 14, the second mobile terminal 14 may re-download the download until the desired item is downloaded, unless any of the following occurs: the second mobile terminal 14 terminates the transmission request, the end of the transmission transaction period, or the interval between the two downloads exceeds a certain set value, This ensures that the resources on the home server 12 and the connected network resources are effectively used.

In addition, in the transaction process, in order to ensure that the home server 12 can trust the second mobile terminal 14 as a trusted person, the present invention further designs a simple symmetric double key protection mechanism, and the used key includes the following two:

(1) Provider Key (P-Key): which is pre-generated by the home server 12 and the first mobile terminal 10 to ensure a trust relationship between the two, the provider key per It will be updated at intervals to avoid the possibility of being cracked after repeated use;

(2) Transaction Key (T-Key): It is a temporary, time-limited key. It is automatically generated by the home server 12 when a transaction is opened. It is only valid during the transaction. It is used to protect the short transaction identity between the second mobile terminal 14 and the home server 12, and is not known by the second mobile terminal 14, but immediately after the transaction is completed, to avoid the transaction key leakage may be eliminated. The possibility of an authorized user arbitrarily signing the request;

Whenever there is a redirected download, the first terminal 10 will request a new transaction key from the home server 12, the transaction key will not be known by the second mobile terminal 14, and after the transfer transaction is over, Immediately lapsed to avoid being counterfeited.

In the system architecture of the present invention, the first mobile terminal, the home server and the second mobile terminal perform data transfer in an XML-RPC mode, and use the identifier and signature fields to confirm the remote program call agreement. (Remote procedure call, RPC) The identity and authorization status of the home server and receiver (ie, the second mobile terminal). Each RPC request will include the identity authentication information of the RPC transmitter (ie, the first mobile terminal) to confirm whether the transmitter is trusted or has sufficient authority to perform the specified action. Even this requirement must include a set of verification codes to prevent the data from being arbitrarily falsified and to perform non-original actions. The RPC home server can compare this set of verification codes with the verification code calculated by itself. The following is the representation format of identifier and signature :

Identifier:=#{P-Key}|(#{P-Key}&#{T-Key})

Signature:=MD5(#{DigestURL_Raw})

The Identifier is the key part. It does not appear directly in the link. Instead, it is stored in DigestURL_Raw. After the Signature value is calculated by the MD5 algorithm or other algorithms, it is added to the link for verification. Since the provider key and the transaction key are unique in the transaction, the RPC home server can determine whether the sender of the message is trustworthy by checking the Signature value.

The home server is further designed with a virtual file system, which is above the native file system, but does not need to reflect the directory structure of the native file system. The directory structure of the virtual file system can be the file and directory name defined by the user. Each file and directory has a meta-data description as described in the third figure, plus some management purpose information. Among them, the global resource location (Uniform Resource Locator, URL, hereinafter referred to as URL) The field is defined by two types: real and virtual. The URL of the real URL is in the relative position of the native file system, such as URL:=/URLBase/AV_Dir/Picture/My.jpeg, and the virtual URL is a temporary file location. The reference is dynamically generated by the name corresponding service, such as URL:=/URLBase/PicXXX.jpeg; the virtual file system will return it to the real URL after obtaining the virtual URL. A virtual URL is a set of dynamically generated meaningless strings. For each transaction, a temporary access point is created on the file that is required to share the transmission, and the virtual correspondence is stored to make the second mobile terminal access temporary. Click on the file until the transaction is closed, and all corresponding and temporary access points generated in the process will be automatically destroyed. Therefore, this virtual file system and dynamic name mapping mechanism provides a simple and secure content directory service. The dynamic name mapping method can enhance security without causing additional burden. When the client obtains the virtual URL, the file can still be downloaded via HTTP GET.

In summary, in order to remove the mobile restrictions in the local area network, integrating various existing network technologies and standards to provide a secure mobile content delivery mechanism and providing asynchronous transmission support, the present invention defines a home server to Power saving and mobility support play a very important role. Generally speaking, mobile handheld devices are powered by batteries, so the power directly transmitted from one mobile device to another is very large, and the loss is symmetrical because both parties must consume power. In the design of the present invention, the information providing party can guide the recipient to download from the home server that has stored the copy, and the use of such asynchronous content delivery has three advantages: First, the family in the fixed network The server can provide more data throughput and shorten the transmission time. Second, the provider can avoid long-distance transmission and reduce energy consumption. Third, the provider and the receiver can be free from the distance, and the two sides do not need At the same time, it is under the same network environment and can move freely. The home server can take over the transfer, so that even if the original provider has switched to another network or even left the network, the transfer will not be affected. The present invention further provides a dual key authentication mechanism, including a provider key and a transaction key, respectively, for determining whether the server and the provider can trust each other, and protecting the short-term transaction identity of the recipient and the home server. In addition, the present invention implements a virtual file system on the home server, which can establish a temporary access point for the requested file during each transaction, and the recipient can only temporarily store the temporary file. The request file is taken. After the same transaction is completed, the access point is invalidated. The virtual file system and the dynamic access point mechanism can protect the home server from being arbitrarily accessed.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention. Therefore, any changes or modifications of the features and spirits of the present invention should be included in the scope of the present invention.

10. . . First action

12. . . Home server

14. . . Second action

The first figure is a block diagram of a mobile content sharing and delivery system in an integrated network environment of the present invention.

The second figure is a schematic diagram of the redirected download service in the system of the present invention.

The third figure shows the code of the meta-data description item for each file and directory in the virtual file system.

The fourth figure is a schematic diagram of the double key protection method in the system of the present invention.

10. . . First action

12. . . Home server

14. . . Second action

Claims (21)

An action content sharing and transmission system in an integrated network environment, comprising: a first mobile terminal for transmitting information to the Internet; and a home server for temporarily storing or storing information of the first mobile terminal and searching for At least one receiving end of the information to establish a connection between the first mobile terminal and the receiving end; and at least one second mobile terminal, as the receiving end receives the data transmitted by the home server; wherein, the second When the mobile terminal is disconnected from the home server or between the home server and the first mobile terminal, the first mobile terminal and the home server pre-generate a provider key. After the second mobile terminal starts downloading the information, the home server automatically generates a transaction key to protect the connection between the home server and the second mobile terminal. The mobile content sharing and transmission system in the integrated network environment as described in claim 1, wherein the first mobile terminal and the second mobile terminal use an address layer of a plug-and-play protocol. Having one of the network addresses, the first mobile terminal searches for the second mobile terminal by using a search layer, and prompts the access location of the second mobile terminal through a description layer, and utilizes A control layer provides data exchange and content sharing browsing between the first mobile terminal and the second mobile terminal. The mobile content sharing and transmission system in the integrated network environment as described in claim 2, wherein when the first mobile terminal and the second mobile terminal join the network, the addressing layer is configured by a dynamic host configuration ( Dynamic Host Configuration Protocol (DHCP) or an automatic IP mode requires addressing. The mobile content sharing and delivery system in the integrated network environment as described in claim 3, wherein the automatic IP mode is used when the dynamic host configuration protocol does not exist. The mobile content sharing and delivery system in the integrated network environment as described in claim 2, wherein the search layer adopts a simple service search protocol (Simple) Service Discovery Protocol (SSDP) for distributed search in small area networks. The mobile content sharing and transmission system in the integrated network environment as described in claim 2, wherein the first mobile terminal and the second mobile terminal periodically broadcast at a predefined location and utilize one of the broadcast messages. The header indicates that one of the first mobile terminal and the second mobile terminal describes the access location of the file. The mobile content sharing and delivery system in the integrated network environment as described in claim 2, wherein the control layer is customized by using a Simple Object Access Protocol (SOAP) to provide a message. Delivery and remote control services. The mobile content sharing and delivery system in the integrated network environment as described in claim 1, wherein the second mobile terminal requests to share the resources of the first mobile terminal, and can directly download the designated mobile terminal from the first mobile terminal. The content. The mobile content sharing and delivery system in the integrated network environment as described in claim 1, wherein the second mobile terminal requests to share the resource of the first mobile terminal, and the resource may be saved in the home server. The second mobile terminal is caused to download the resource from the home server. The mobile content sharing and delivery system in the integrated network environment as described in claim 1, wherein the first mobile terminal stores the plurality of files in the home server, so that the second mobile terminal is from the first After the mobile terminal downloads a pre-file, the subsequent file can be downloaded directly from the home server. The mobile content sharing and delivery system in the integrated network environment as described in claim 1, wherein the second mobile terminal is disconnected from the home server or between the home server and the first mobile terminal. When it is necessary to reconnect, it can be transmitted after being authenticated and authorized through a secure transmission mechanism. The mobile content sharing and transmission system in the integrated network environment as described in claim 1, wherein the home server is disconnected when the connection between the first mobile terminal, the home server, and the second mobile terminal is interrupted. Providing a transmission period to the first mobile terminal and the second The transmission transaction between the mobile terminals, when the first mobile terminal notifies the home server and the second mobile terminal can start the transmission download, the second mobile terminal can resume the download. The mobile content sharing and delivery system in the integrated network environment as described in claim 1, wherein the first mobile terminal and the provider key generated by the home server system are automatically updated at intervals. The mobile content sharing and delivery system in the integrated network environment as described in claim 1, wherein one of the first mobile terminal and the second mobile terminal has a content directory service, according to a user. The need to display the shared content of the information, and all sharing projects produce a corresponding meta-data. The mobile content sharing and delivery system in the integrated network environment as described in claim 1, wherein the first mobile terminal and the second mobile terminal are located in different network environments. The mobile content sharing and delivery system in the integrated network environment as described in claim 1, wherein the home server further includes a virtual file system, and one file is required to be shared on each transaction. The temporary access point causes the second mobile terminal to request the file through the temporary access point, and the temporary access point disappears when the transaction is completed. A method for secure transmission in an integrated network environment, which is a mechanism for requesting to continue transmission when a connection between a first mobile terminal, a home server, and at least a second mobile terminal is interrupted, including the following steps: The server provides a transmission period to the transmission transaction between the first mobile terminal and the second mobile terminal; the first mobile terminal and the home server pre-generate a provider key; the second mobile terminal starts to download And the home server automatically generates a transaction key after the transmission transaction begins to protect the connection between the home server and the second mobile terminal. A method for secure transmission in an integrated network environment as described in claim 17 wherein the provider key is automatically updated at intervals. The method of secure transmission in an integrated network environment as described in claim 17, wherein the second mobile terminal can resume downloading until the download is completed within the transmission period. The method for secure transmission in an integrated network environment, as described in claim 17, wherein the first mobile terminal, the home server, and the second mobile terminal perform data transmission in an XML-RPC mode, and The second data field confirms the identity and authorization status of the home server and the second mobile terminal. A method of secure transmission in an integrated network environment as described in claim 20, wherein the data field is located in the provider key and the transaction key.