Service access method, device, and system

• US 8,813,115 B2
• Filed: 09/25/2012
• Issued: 08/19/2014
• Est. Priority Date: 11/21/2011
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Song, Junjun, Ding, Hancheng, Tu, Cong, Qin, Yu, Zheng, Yan, Wang, Yinhe
• Primary Examiner(s): Goodarzi, Nasser
• Assistant Examiner(s): Chae, Kyu
• Application Number:
  US13/626,689
• Publication Number:
  US 20130132995A1
• Time in Patent Office: 693 Days
• Field of Search: 725/25, 725/38, 725/54, 725/143, 725/148
• US Class Current: 725/25
• CPC Class Codes: H04L 12/185 with management of multicast group membership
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/6405 Multicasting data broadcast and multicast in packet switching networks H04L12/18
• CPC Class Codes: H04N 21/64322 IP

Abstract

The present invention provides a service access method, device, and system, and relates to the field of television services, to guarantee multicast security of a network device. The method includes: obtaining an authorized multicast address list according to program channel list information provided by a server; receiving an Internet Group Management Protocol IGMP packet request sent by a user terminal device, where the IGMP packet request carries a multicast address; verifying the multicast address in the IGMP packet request according to the multicast address list; and sending a media data stream corresponding to the verified multicast address to the user terminal device. The solutions of the present invention are suitable for realizing the security of multicast of network device.

Claims

1. A service access method for providing multicast television services, comprising:

obtaining, by a network device, an authorized multicast address list according to program channel list information provided by each Internet Protocol television (IPTV) server of various media carriers, the authorized multicast address list containing a plurality of multicast addresses in use for distributing corresponding media data streams, wherein the program channel list information is contained in a packet, the formats of packets sent by IPTV servers of different media carriers are different;

wherein the obtaining the authorized multicast address lists comprises;

sending, to a parsing device, the packets of different formats provided by the IPTV servers of the different media carriers;

receiving, by the parsing device, the packets of different formats;

determining, by the parsing device, a specific field of the multicast addresses in each of the packets of different formats, according to the format of the packet;

parsing, by the parsing device, each of the packets of different formats to obtain all channel addresses in each of the packets;

generating, by the parsing device, channel address lists according to all the channel addresses of each of the packets of different formats, and sending the channel address lists to the network device;

receiving, by the network device, the channel address lists and obtaining the authorized multicast address list according to the channel address lists;

receiving, by the network device, an Internet Group Management Protocol (IGMP) packet request sent by a user terminal device, wherein the IGMP packet request carries a multicast address;

verifying, by the network device, that the multicast address carried by the IGMP packet request is in the authorized multicast address list; and

if the multicast address carried by the IGMP packet request is in the authorized multicast address list, sending, by the network device, a media data stream corresponding to the multicast address carried by the IGMP packet request to the user terminal device.

2. The service access method according to claim 1, the step of obtaining the authorized multicast address list comprises:

obtaining, by the network device, multiple authorized multicast address lists, wherein there are multiple user terminal devices, and one authorized multicast address list is obtained for only one user terminal device.

3. The service access method according to claim 1, the step of obtaining the authorized multicast address list comprises:

obtaining, by the network device, multiple authorized multicast address lists, wherein there are multiple user terminal devices, the user terminal devices have plurality permissions, and only one authorized multicast address list is obtained for each permission.

4. A service access system, comprising:

a network device and a parsing device;

wherein

the network device is configured to send, to the parsing device, packets provided by Internet Protocol television (IPTV) servers of different media carriers;

each of the packets contains program channel list information provided by each IPTV server of various media carriers, formats of the packets sent by IPTV servers of the different media carriers are different;

receive channel address lists returned by the parsing device;

obtain an authorized multicast address list according to the channel address lists, the authorized multicast address list containing a plurality of multicast addresses in use for distributing corresponding media data streams;

receive an Internet Group Management Protocol (IGMP) packet request sent by a user terminal device, wherein the IGMP packet request carries a multicast address;

verify that the multicast address carried by the IGMP packet request is in the authorized multicast address list; and

if the multicast address carried by the IGMP packet request is in the authorized multicast address list, send a media data stream corresponding to the multicast address carried by the IGMP packet request to the user terminal device;

the parsing device is configured to determine a specific field of the multicast addresses in each of the received packets of different formats, according to the format of the packet;

parse each of the packets of different formats to obtain all channel addresses in each of the packets, generate the channel address lists according to all the channel addresses of each of the packets of different formats, and send the generated channel address lists to the network device.

5. The service access system according to claim 4, wherein the parsing device is configured to generate multiple authorized multicast address lists, wherein there are multiple user terminal devices, and one authorized multicast address list is obtained for only one user terminal device.

6. The service access system according to claim 4, wherein the parsing device is configured to generate multiple authorized multicast address lists, wherein there are multiple user terminal devices, the user terminal devices have plurality permissions, and only one authorized multicast address list is obtained for each permission.