SERVICE ACCESS METHOD, DEVICE, AND SYSTEM

• US 20130132995A1
• Filed: 09/25/2012
• Published: 05/23/2013
• Est. Priority Date: 11/21/2011
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: TU, Cong, QIN, Yu, SONG, Junjun, DING, Hancheng, ZHENG, Yan, WANG, Yinhe
• Granted Patent: US 8,813,115 B2
• Time in Patent Office: Days
• US Class Current: 725/27
• CPC Class Codes: H04L 12/185 with management of multicast group membership
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/6405 Multicasting data broadcast and multicast in packet switching networks H04L12/18
• CPC Class Codes: H04N 21/64322 IP

Abstract

The present invention provides a service access method, device, and system, and relates to the field of television services, to guarantee multicast security of a network device. The method includes: obtaining an authorized multicast address list according to program channel list information provided by a server; receiving an Internet Group Management Protocol IGMP packet request sent by a user terminal device, where the IGMP packet request carries a multicast address; verifying the multicast address in the IGMP packet request according to the multicast address list; and sending a media data stream corresponding to the verified multicast address to the user terminal device. The solutions of the present invention are suitable for realizing the security of multicast of network device.

Claims

1. A service access method for providing multicast television services, comprising:

obtaining, by a network device, an authorized multicast address list according to program channel list information provided by an Internet Protocol television (IPTV) server, the authorized multicast address list containing a plurality of multicast addresses in use for distributing corresponding media data streams;

receiving, by the network device, an Internet Group Management Protocol (IGMP) packet request sent by a user terminal device, wherein the IGMP packet request carries a multicast address;

verifying, by the network device, that the multicast address carried by the IGMP packet request is in the authorized multicast address list; and

if the multicast address carried by the IGMP packet request is in the authorized multicast address list, sending, by the network device, a media data stream corresponding to the multicast address carried by the IGMP packet request to the user terminal device.

2. The service access method according to claim 1, wherein the step of obtaining the authorized multicast address list comprises:

parsing the program channel list information provided by the IPTV server to obtain the plurality of multicast addresses in use for distributing corresponding media data streams.

3. The service access method according to claim 1, wherein the step of obtaining the authorized multicast address list comprises:

sending, to a parsing device, the program channel list information provided by the IPTV server;

receiving, by the network device, the plurality of multicast addresses in use for distributing corresponding media data streams returned by the parsing device.

4. The service access method according to claim 1, the step of obtaining the authorized multicast address list comprises:

obtaining, by the network device, multiple authorized multicast address lists, wherein there are multiple user terminal devices, and one authorized multicast address list is obtained for only one user terminal device.

5. The service access method according to claim 1, the step of obtaining the authorized multicast address list comprises:

obtaining, by the network device, multiple authorized multicast address lists, wherein there are multiple user terminal devices, the user terminal devices have plurality permissions, and only one authorized multicast address list is obtained for each permission.

6. A network device, comprising:

an obtaining unit, configured to obtain an authorized multicast address list according to program channel list information provided by an Internet Protocol television (IPTV) server, the authorized multicast address list containing a plurality of multicast addresses in use for distributing corresponding media data streams;

a receiving unit, configured to receive an Internet Group Management Protocol (IGMP) packet request sent by a user terminal device, wherein the IGMP packet request carries a multicast address;

a verification unit, configured to verify that the multicast address carried by the IGMP packet request is in the authorized multicast address list;

a sending unit, configured to send a media data stream corresponding to the multicast address carried by the IGMP packet request to the user terminal device, if the multicast address carried by the IGMP packet request is in the authorized multicast address list.

7. The network device according to claim 6, wherein the obtaining unit comprises:

a parsing module, configured to parse the program channel list information provided by the IPTV server to obtain the plurality of multicast addresses in use for distributing corresponding media data streams.

8. The network device according to claim 6, wherein the obtaining unit comprises:

a sending module, configured to send, to a parsing device, the program channel list information provided by the IPTV server;

a receiving module, configured to receive the plurality of multicast addresses in use for distributing corresponding media data streams returned by the parsing device.

9. The network device according to claim 6, wherein the obtaining unit specifically configured to multiple authorized multicast address lists, wherein there are multiple user terminal devices, and one authorized multicast address list is obtained for only one user terminal device.

10. The network device according to claim 6, wherein the obtaining unit specifically configured to obtain multiple authorized multicast address lists, wherein there are multiple user terminal devices, the user terminal devices have plurality permissions, and only one authorized multicast address list is obtained for each permission.

11. A service access system, comprising:

a network device and a parsing device;

wherein

the network device is configured to send, to the parsing device, program channel list information provided by an Internet Protocol television (IPTV) server;

receive an authorized multicast address list returned by the parsing device, the authorized multicast address list containing a plurality of multicast addresses in use for distributing corresponding media data streams;

receive an Internet Group Management Protocol (IGMP) packet request sent by a user terminal device, wherein the IGMP packet request carries a multicast address;

verify that the multicast address carried by the IGMP packet request is in the authorized multicast address list; and

if the multicast address carried by the IGMP packet request is in the authorized multicast address list, send a media data stream corresponding to the multicast address carried by the IGMP packet request to the user terminal device;

the parsing device is configured to parse the program channel list information to obtain the plurality of multicast addresses in use for distributing corresponding media data streams, generate the authorized multicast address list according to the obtained plurality of multicast addresses, and send the generated authorized multicast address list to the network device.

12. The service access system according to claim 11, wherein the parsing device is specifically configured to generate multiple authorized multicast address lists, wherein there are multiple user terminal devices, and one authorized multicast address list is obtained for only one user terminal device.

13. The service access system according to claim 11, wherein the parsing device is specifically configured to generate multiple authorized multicast address lists, wherein there are multiple user terminal devices, the user terminal devices have plurality permissions, and only one authorized multicast address list is obtained for each permission.