METHOD AND APPARATUS FOR ENSURING SECURITY OF REMOTE USER INTERFACE SESSION USING OUT-OF-BAND COMMUNICATION

• US 20090007225A1
• Filed: 06/26/2008
• Published: 01/01/2009
• Est. Priority Date: 06/29/2007
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Lee, Joo-yeol, Jung, Dong-shin
• Granted Patent: US 8,966,641 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method and apparatus for ensuring security of a session. In the method, a first client selects a user interface related to a process in need of security from among user interfaces related to predetermined contents provided from a first server, and a first client or a second client communicates directly with a second server operated by a contents provider to perform the process in need of security and notifies the first server of the performing result. Thus, it is not required to transmit/receive security information via the first server.

Claims

1. A method of ensuring security of a session of a first server with respect to a first client, the method comprising:

providing, by the first server, user interfaces related to predetermined contents to the first client;

transmitting, by the first server, data related to a process in need of security to the first client or a second client while the first client selects a user interface related to the process from among the user interfaces; and

receiving, by the first server, a result of performing the process from the first client or the second client by using the transmitted data,

wherein the first client or the second client communicates directly with a second server providing the predetermined contents to perform the process.

2. The method of claim 1, wherein the first server is a remote user interface server (RUIS) and the first client is a remote user interface client (RUIC).

3. The method of claim 2, wherein the first server, the first client and the second client are devices of a home network.

4. The method of claim 3, wherein the transmitting of the data comprises:

receiving information regarding at least one of an execution environment and a security mechanism of an application for performing the process from at least one of the first client and the second client; and

transmitting at least one of an application for performing the process and a uniform resource location (URL) address used to download the application for performing the process to the first client or the second client, based on the received information.

5. The method of claim 4, wherein the receiving of the information regarding at least one of the execution environment and the security mechanism of the application comprises receiving information regarding at least one of the execution environment and the security mechanism of the application for performing the process from at least one of the first client and the second client by using at least one of a device description and a service description that are defined in the home network.

6. The method of claim 3, wherein the first server is an Internet protocol television (IPTV) set top box, and the first client is a TV.

7. The method of claim 1, wherein the process is related to payment for the predetermined contents.

8. A method of ensuring security of a session of a first client with respect to a first server, the method comprising:

receiving, by the first client, user interfaces related to predetermined contents from the first server;

selecting, by the first client, a user interface related to a process in need of security from among the user interfaces; and

receiving, by the first client, a user interface related to a result of performing the process from the first server, according to the selection,

wherein the first client or a second client communicates directly with a second server providing the predetermined contents to perform the process.

9. The method of claim 8, wherein the first server is an RUIS, and the first client is an RUIC.

10. The method of claim 9, wherein the first server, the first client and the second client are devices of a home network.

11. The method of claim 10, wherein the receiving of the user interface related to the result of performing the process comprises:

receiving at least one of an application for performing the process and a URL used to download the application for performing the process from the first server;

installing the application for performing the process, based on the received application or the URL;

executing the installed application to perform the process;

transmitting a result of performing the process to the first server; and

receiving a user interface related to the result from the first server.

12. The method of claim 11, wherein the receiving of at least one of the application for performing the process and the URL used to download the application for performing the process comprises:

transmitting information regarding at least one of an execution environment and a security mechanism of an application for performing the process of the first client to the first server; and

receiving at least one of the application for performing the process and the URL used to download the application for performing the process, which are transmitted by the first server, according to the transmitted information.

13. The method of claim 12, wherein the transmitting of the information regarding at least one of the execution environment and the security mechanism of the application of the first client comprises transmitting information regarding at least one of the execution environment and the security mechanism of the application for performing the process of the first client by using at least one of a device description and a service description that are defined in the home network.

14. The method of claim 8, wherein the first server is an Internet protocol television (IPTV) set top box, and the first client is a TV.

15. The method of claim 8, wherein the process is related to payment for the predetermined contents.

16. The method of claim 10, wherein the second client receives at least one of an application for performing the process and a URL used to download the application for performing the process from the first server, installs and executes the application for performing the process, based on the received application or the URL to perform the process, and then transmits a result of performing the process to the first server.

17. An apparatus for ensuring security of a session of a first server with respect to a first client, the apparatus comprising:

an interface providing unit which provides user interfaces related to predetermined contents to the first client; and

a process controlling unit which transmits data related to a process in need of security to the first client or a second client as the first client selects a user interface related to the process in need of security from among the user interfaces, and receives a result of performing the process by using the transmitted data from the first client or the second client,

wherein the first client or the second client communicates directly with a second server to perform the process.

18. The apparatus of claim 17, wherein the first server is an RUIS, and the first client is an RUIC.

19. The apparatus of claim 18, wherein the first server, the first client and the second client are devices of a home network.

20. The apparatus of claim 19, wherein the process controlling unit receives information regarding at least one of an execution environment and a security mechanism of an application for performing the process from at least one of the first client and the second client, and transmits at least one of an application for performing the process and a URL used to download the application for performing the process to the first client or the second client, based on the received information.

21. The apparatus of claim 20, wherein the process controlling unit receives information regarding at least one of the execution environment and the security mechanism of the application for performing the process from at least one of the first client and the second client by using at least one of a device description and a service description that are defined in the home network.

22. The apparatus of claim 17, wherein the process is related to payment for the predetermined contents.

23. An apparatus for ensuring security of a session of a first client with respect to a first server, the apparatus comprising:

an interface receiving unit which receives user interfaces related to predetermined contents from the first server and selects a user interface related to a process in need of security from among the user interfaces;

a process controlling unit which receives data related to the process from the first server, according to the selection; and

a processing performing unit which communicates directly with a second server providing the predetermined contents to perform the process,

wherein the process controlling unit transmits the result of performing the process to the first server.

24. The apparatus of claim 23, wherein the first server is a RUIS, and the first client is an RUIC.

25. The apparatus of claim 24, wherein the first server, the first client and the second client are devices of a home network.

26. The apparatus of claim 25, wherein the process controlling unit receives at least one of an application for performing the process and a URL used to download the application for performing the process from the first server, and installs the application for performing the process, based on the received application or the URL.

27. The apparatus of claim 26, wherein the process controlling unit transmits information regarding at least one of an execution environment and a security mechanism of an application for performing the process of the first client to the first server, and receives at least one of the application for performing the process or the URL used to download the application for performing the process, which are transmitted by the first server, according to the transmitted information.

28. The apparatus of claim 23, wherein the process is related to payment for the predetermined contents.

29. An apparatus of a second client for ensuring security of a session between a first server and a first client, the apparatus comprising:

a process controlling unit which receives data related to a process in need of security while a first client receives user interfaces related to predetermined contents from the first server and selects a user interface related to the process from among the received user interfaces; and

a processing performing unit which communicates directly with a second server providing the predetermined contents to perform the process, based on the received data,

wherein the process controlling unit transmits the result of performing the process to the first server.

30. A computer readable recording medium having recorded thereon a program for executing a method of ensuring security of a session of a first server with respect to a first client, the method comprising:

providing, by the first server, user interfaces related to predetermined contents to the first client;

transmitting, by the first server, data related to a process in need of security to the first client or a second client while the first client selects a user interface related to the process from among the user interfaces; and

receiving, by the first server, a result of performing the process from the first client or the second client by using the transmitted data,

wherein the first client or the second client communicates directly with a second server providing the predetermined contents to perform the process.

31. A computer readable recording medium having recorded thereon a program for executing a method of ensuring security of a session of a first client with respect to a first server, the method comprising:

receiving, by the first client, user interfaces related to predetermined contents from the first server;

selecting, by the first client, a user interface related to a process in need of security from among the user interfaces; and

receiving, by the first client, a user interface related to a result of performing the process from the first server, according to the selection,

wherein the first client or a second client communicates directly with a second server providing the predetermined contents to perform the process.