Summary of the invention
The objective of the invention is: design surface is to the digital home network service management system of the integration of three networks, the existing digital home network of solution provides the shortcoming that configuration is complicated, flow process is unintelligible, expansion is difficult based on the service of concrete application, shield bottom service details difference to the user, indiscriminate service is provided.At the main trend of the current integration of three networks, provide under the diversified background of service at various types of networks, what designed service management system helped serving obtains, uses and develop, make service registration, order, use becomes clear and simple.The present invention has further designed digital home's service using method, is used for the various services that user security visit digital home network provides.
Realize that technical scheme of the present invention is the digital home network service management system towards the integration of three networks of design, comprises security management subsystem, control subsystem, business management subsystem, external network access subsystem and application domain network insertion subsystem; Control subsystem in the digital home network service management system is the core of service management system, respectively with the heterogeneous network access subsystem, security management subsystem, business management subsystem, application domain network insertion subsystem links to each other, after control subsystem is resolved the user instruction message in the digital home network, judge the operation that the user will carry out, for the operation of other modules of control subsystem provides the execution foundation, according to the message content that parses, under the effect of control strategy, other subsystems that scheduling is attached thereto are finished the content that this instruction comprises.All the other four subsystems carry out interacting message by control subsystem respectively, there is no directly mutual each other.
Described security management subsystem is used for providing safety protecting mechanism to digital home services;
Described control subsystem is responsible for the service order of digital home network is resolved, and service procedure is controlled;
Described business management subsystem is responsible for centralized management is unified in all services of family, provides unified service interface to the domestic consumer;
Described external network access subsystem is responsible for the cut-in operation of outside heterogeneous network;
Described application domain network insertion subsystem is made up of each application domain administrative center, is responsible for realizing the cut-in operation of home network., managerial structure complicated situation various at the class of business that exists in the digital home, business demand according to digital home, home network is divided into different application domains, and described application domain administrative center entity is that the terminal equipment in the same application domain and the business service that provided thereof are managed functional entity with the conversion of different application inter-domain protocol.
Described digital home network service management system, described security management subsystem comprise subscriber information management module, key and certificate management module, user and device authentication module, system safety module, access control module.
Described digital home network service management system, described control subsystem comprise command analysis module, instruction Executive Module, security dispatching module, service dispatch module, control strategy module, control interface module.
Described digital home network service management system, described business management subsystem comprises service registry module, service lookup module, service configuration module, service ordering module, service interface module, realize respectively service registration, search, dispose, order process.
Described digital home network service management system, described external network access subsystem comprises CHINA RFTCOM Co Ltd interface module, computer network interface module, telecommunications network interface module and network middleware module.
Described digital home network service management system, described application domain network insertion subsystem comprises each application domain administrative center, application domain administrative center is made up of service registry module, service providing module, procotol modular converter, access control module, device authentication module, be used to guarantee interconnecting of the interior equipment of application domain, the message of using different network protocol is carried out protocol conversion, and service registry is provided and uses interface to digital family equipment and user, the authentication function of equipment in access control mechanisms and the application domain is provided simultaneously.
The present invention has designed the digital home network service management towards the integration of three networks, comprises service registry process and service acquisition procedure;
Described service registry process comprises the steps:
1.a. the application domain administrative center of service providing device in the application domain to its place send " service registry request information; this message need comprise essential informations such as device identification, service identifiers, title, content, so as application domain administrative center in the later stage service of searching use;
1.b. after application domain administrative center receives this message, its service list is upgraded;
1.c. structure application domain service registry request data package, " application domain service registry request information includes information such as application domain administrative center sign, service identifiers, service name, service content to the home gateway transmission;
1.d. after home gateway receives this message, its service list is upgraded;
1.e. after upgrading successfully, send " service registry success " message to application domain administrative center;
1.f. application domain administrative center sends " service registry success " message to service providing device, service registry process so far finishes.
Described service acquisition procedure comprises that the domestic consumer visits and should visit outside heterogeneous network service with service, other application domain services of the cross-domain visit of domestic consumer, domestic consumer's remote access application domain service and domestic consumer in the territory.
Described service acquisition procedure is after the user of family sends service request information, at first the type of obtaining of this message is judged by service management system, if user capture should be with serving this type in the territory, then service acquisition procedure need not participate in by the home gateway entity, and the mainly service-seeking that the user is proposed by the application domain administrative center entity in the application domain network insertion subsystem, service are obtained request message and responded; If other application domain services of the cross-domain visit of domestic consumer or domestic consumer's remote access application domain service or domestic consumer visit outside heterogeneous network service, then message analysis is obtained in service, under the support of control strategy module, call in the home gateway corresponding subsystem then and come user's request message is responded by the command analysis module of control subsystem in the home gateway.
Designed digital home network service management system and method have the following advantages:
(1) uses numerous and complicated at existing digital home network, the configuration difficulty, the shortcoming of poor expandability, adopt " using i.e. service " thought, the application that various device provided in the digital home is carried out unified management with the form of service by business management subsystem and application domain network insertion subsystem, basic service management functions such as service-seeking, order and use are provided to the user.The Service Management pattern that is adopted strengthened the expanding of digital home network service, configurable, can operate and manageability.
(2) designed service management system is only supported at existing network service management system to expand on the basis of Internet service and improve, and makes it can support computer network, communication network and three kinds of services that heterogeneous network provided of television network broadcast.
(3) designed service management system can solve the deficiency that difficulty is merged in the heterogeneous network service effectively.Home gateway is integrated the service that outside isomery provides network to provide based on the thought of " service middleware ", provide unified service interface to the user, shield the difference of bottom communication technology between heterogeneous networks, made the user use the process of service more clear simple.
Embodiment
The present invention has disposed towards integration of three networks digital home network service management system and method, and concrete enforcement comprises following components:
One, the design of digital home network service management system
As shown in Figure 1, the digital home network service management system is divided into security management subsystem, control subsystem, business management subsystem, external network access subsystem and 5 parts of application domain network insertion subsystem.
1. security management subsystem
Security management subsystem provides basic safety protecting mechanism for digital home's service; comprise modules such as subscriber information management, key and certificate management, user and device authentication, system safety, access control, provide security mechanisms such as authentification of user, device authentication, antivirus protection and service access control to domestic consumer and service.
2. control subsystem
Control subsystem is responsible for the service order of user in the digital home network is resolved, and service procedure is controlled according to specified control strategy.It comprises modules such as instruction is resolved, instruction execution, security dispatching, service dispatch, control strategy, control interface.
(a) command analysis module
This module is responsible for the user instruction message in the digital home network is resolved, and analyzes contents such as the type of this message and attribute, judges the operation that the user will carry out, for the operation of other modules of control subsystem provides the execution foundation.
(b) instruction Executive Module
According to the message content that command analysis module parses, dispatch corresponding module in each subsystem, finish the content that this instruction comprises.
(c) security dispatching module
This module is responsible for receiving the security dispatching message in the instruction Executive Module, by dispatching the corresponding module in the security management subsystem, finish in the instruction message safety management function that is comprised.
(d) service dispatch module
This module is responsible for receiving the service dispatch message in the instruction Executive Module, by the corresponding module in the dispatching services ADMINISTRATION SUBSYSTEM, and the service management function of finishing in the instruction message to be comprised.
(e) control strategy module
The control strategy of being followed during defined instruction Executive Module execution command, for example: dispatching priority, service dispatching algorithm etc.
(f) control interface module
This module other subsystems in service management system provide corresponding calling interface, are responsible for handing over five with security management subsystem, business management subsystem, external network access subsystem and application domain network insertion subsystem.
3. business management subsystem
Main being responsible for managed concentratedly business related in all application domains in the digital home, a plurality of modules such as service registry, service search, service configuration, service ordering have been comprised in this system, provide unified service interface to the domestic consumer, realize service registration, dispose, order, service management function such as inquiry.
(a) service registry module
This module is used for home services is registered, and is to realize by the login request message that receives application domain administrative center;
(b) service lookup module
This module is responsible for digital home network service is searched, and realizes the retrieval of user to required service function and performance, and can return service list, for its selection;
(c) service configuration module
This module is used for information such as the parameter of difference service, environment, port are configured, and ensures the true(-)running of service;
(d) service ordering module
This module realizes the subscription function of user to service, sets up and can charge after the relation of ordering and operation such as control;
(e) service interface module
This module provides unified service to use interface to the user of digital home.By calling this interface, the registration that the user can realize serving, dispose, order, inquiry, implementation.
4. external network access subsystem
At multiple communication mode in digital home's external network and deposit, service provides diversified present situation, and design external network access subsystem realizes that the unified of outside heterogeneous network inserts.This subsystem comprises the interface module and the network middleware module of CHINA RFTCOM Co Ltd, computer network, communication network.The heterogeneous networks interface module has realized having the access of the heterogeneous network of different communication mechanism, and can obtain the service that corresponding network provides.The network middleware module is responsible for will reintegrating outside heterogeneous network, for the user of digital home provides the uniform communication interface.This module comprises that communication is merged and two submodules are merged in service.
(a) communication fusant module
Communication fusant module is mainly carried out protocol conversion to the outside heterogeneous network with different communication mechanism, provides service interface necessary communication interaction ability, and the true(-)running of flow process is used in the service of guarantee.
(b) three net service fusant modules
The service interface that the outside various concrete heterogeneous network of three net service fusant module package is provided is digital home's control subsystem calling interface of providing uniform services.
More than four subsystems all realize in the form that home gateway is sentenced software systems.Home gateway is the core of digital home network, it is the crucial entity that the user obtains outside heterogeneous network service, security management subsystem, business management subsystem, control subsystem and outside heterogeneous network access subsystem are focused on home gateway by form of software, can realize functions such as BSM, safety management, service control and network insertion respectively.
5. application domain network insertion subsystem
Application domain network insertion subsystem is made up of each application domain administrative center, is responsible for realizing the access of home network.The different application domain of described application domain administrative center's entity management, described application domain is, a managerial structure complicated situation various at the class of business that exists in the digital home, divide according to the business demand of digital home, described application domain administrative center entity is that the terminal equipment in the same application domain and the business service that provided thereof are managed functional entity with the conversion of different application inter-domain protocol, alleviated the management of home gateway, also helped the shared and audit of resource in the same application domain concrete business.Application domain administrative center comprises modules such as service registry, service provide, procotol conversion, access control, device authentication, major responsibility is to guarantee interconnecting of the interior equipment of application domain, the message of using different network protocol is carried out protocol conversion, and service registry is provided and uses interface to digital family equipment and user, the authentication function of equipment in access control mechanisms and the application domain is provided simultaneously.
Service registry module in this subsystem is used to receive the register requirement of digital home's service; Service providing module is used for the service execution process of user terminal; Access control module ensures that the validated user with certain authority could use service, and the procotol modular converter is used for different agreement message is changed, and plays the gateway effect; The device authentication module is used for the authenticity of equipment is authenticated, and prevents the service that illegality equipment visit home network provides.
Control subsystem in the digital home network service management system is the core of service management system, respectively with the heterogeneous network access subsystem, security management subsystem, business management subsystem, application domain network insertion subsystem links to each other, after control subsystem is resolved the user instruction message in the digital home network, judge the operation that the user will carry out, for the operation of other modules of control subsystem provides the execution foundation, according to the message content that parses, under the effect of control strategy, other subsystems that scheduling is attached thereto are finished the content that this instruction comprises.All the other four subsystems carry out interacting message by control subsystem respectively, there is no directly mutual each other.
Two, the design of digital home network service using method
Digital home network service using method is used for digital home's service provides process information on services reciprocal process, it has defined service registry and service and has obtained these two kinds the flow process of serving basic operation is provided, the service registry process is primarily aimed at service providing device, service acquisition procedure then at be the domestic consumer of visit digital home various services in inside and outside.
The digital home network framework and the service management system of Reference Design, service registry and the flow process of obtaining are mainly concerned with application domain service providing device, application domain administrative center, three network entities of home gateway.
Described application domain service providing device refers to the digital household appliances that certain concrete service can be provided in each application domain.Described home gateway is then integrated security management subsystem in the service management system, business management subsystem, control subsystem and external network access subsystem has functions such as network insertion, service management, safety management, flow process control.
1. service registry
Functional requirement according to service management system, crucial entity places such as application domain administrative center, home gateway all need to safeguard corresponding service list, be responsible for all services in the digital home are managed, and service providing device at first needed to carry out relevant register flow path to application domain administrative center with home gateway before service is provided, and only can provide corresponding service to the user of digital home after succeeding in registration.Therefore, service registry is the first step that service provides process.Concrete service registry flow process, as shown in Figure 2.
Concrete service registry flow process is as follows:
1). the application domain administrative center of service providing device in the application domain to its place send " service registry request information; this message need comprise essential informations such as device identification, service identifiers, title, content, so as application domain administrative center in the later stage service of searching use.
2) after application domain administrative center receives this message, its service list is upgraded.
3) structure application domain service registry request data package, " application domain service registry request information includes information such as application domain administrative center sign, service identifiers, service name, service content to the home gateway transmission.
4) after home gateway receives this message, its service list is upgraded.
5) after upgrading successfully, send " service registry success " message to application domain administrative center.
6) application domain administrative center sends " service registry success " message to service providing device, and service registry process so far finishes.
2. service is obtained
It is a crucial step of digital home's service using method that service is obtained, and it has comprised polytype key operations such as service-seeking, the service request of obtaining, service response.According to the difference of obtaining COS, this flow process has comprised domestic consumer's visit should visit 4 kinds of different service acquisition procedures of outside heterogeneous network service with service, other application domain services of the cross-domain visit of domestic consumer, domestic consumer's remote access application domain method of servicing and domestic consumer in the territory.
The general thought that service is obtained is: at first the classification of message being obtained in user's service by service management system is judged, if user capture should be with serving this type in the territory, then service acquisition procedure need not participate in by the home gateway entity, and the mainly service-seeking that the user is proposed by the application domain administrative center entity in the application domain network insertion subsystem, service are obtained request message and responded.If other three types, then message analysis is obtained in service, under the support of control strategy module, call in the home gateway corresponding subsystem then and come user's request message is responded by the command analysis module of control subsystem in the home gateway.
(1) domestic consumer's visit should be with serving in the territory
Fig. 3 is the process that this territory of user capture provides service.
Idiographic flow is described below:
1) user at first sends the service search request, search should with the territory all services that can provide.
2) after receiving the service search request, its service list that provides will be provided in application domain administrative center.If unregistered any service in this application domain is then returned and is searched failed message.
3) after the user receives return-list, select own required service, and obtain request to the service of sending of the application domain administrative center with this service.
4) application domain administrative center differentiates user's identity, differentiates by the back to send the service access token to it.
5) user provides equipment to send the service that has access token to service specified and obtains request after receiving access token.
6) service providing device is at first verified user's access token when receiving service request, after checking is passed through, makes corresponding service response, just begins normal service data reciprocal process later on.
(2) other application domain services of the cross-domain visit of domestic consumer
Divide network according to application type, can reduce the demand of the cross-domain access services of user as far as possible, but the situation of other application domain services of the cross-domain visit of domestic consumer still exists, and for the service in non-this territory, the user need be to the network entity on upper strata---home gateway conducts interviews.
Fig. 4 is the process that the domestic consumer visits cross-domain services:
Concrete service procedure is described below:
1) for the service of non-this territory, the user be at first to using territory administrative center, i.e. its place application domain administrative center sends and non-ly should use territory service search request.
2) should receive non-should the need this request is transmitted to home gateway with territory administrative center with after the service search request of territory.
3) the home gateway place is safeguarding the tabulation of all services of each application domain in the digital home network, after receiving the service search request, home gateway will return current all service lists, in order to make user's access services exactly, should comprise the information such as sign, IP of service place application domain administrative center in this message.If the unregistered any service in home gateway place is then returned and is searched failed message.
4) the application domain administrative center lookup result forwards that will receive from home gateway is given the user, service request procedure after this and this territory service class of request seemingly, Qing Qiu object difference only.
5) user obtains request to the service of sending of the application domain administrative center with this service after receiving the service list that returns.
6) application domain administrative center differentiates user's identity, differentiates by the back to send the service access token to it.
7) user provides equipment to send the service that has access token to service specified and obtains request after receiving access token.
8) service providing device is at first verified user's access token when receiving service request, after checking is passed through, makes corresponding service response, just begins normal service data reciprocal process later on.
(3) domestic consumer's remote access application domain service
If the service that domestic consumer's remote access application domain provides then needs to the relevant service of home gateway inquiry, and calls.Fig. 5 is the flow process that the domestic consumer visits remote access service:
Concrete service procedure is described below:
1) domestic consumer at first sends the service search request to home gateway.
2) after home gateway receives the service search request, return the service list that it provides, wherein also comprise the information such as sign, IP of service place application domain administrative center.If unregistered any service is returned and is searched failed message.The process of service access afterwards and preceding two kinds of situations are similar.
3) user obtains request to the service of sending of the application domain administrative center with this service after receiving return results.
4) application domain administrative center differentiates user's identity, differentiates by the back to send the service access token to it.
5) user provides equipment to send the service that has access token to service specified and obtains request after receiving access token.
6) service providing device is at first verified user's access token when receiving service request, after checking is passed through, makes corresponding service response, just begins normal service data reciprocal process later on.
(4) domestic consumer visits outside heterogeneous network service
For the service that outside heterogeneous network provides, the user need inquire about and uses to the Service Gateway of external network by home gateway.
The detailed process that the domestic consumer visits the service of outside heterogeneous network as shown in Figure 6.
Concrete service procedure is described below:
1) user of digital home sends the service search request to home gateway.
2) home gateway is handled backcasting machine Network gateway to search request and is sent the service search request.
3) home gateway sends the service search request to the Service Gateway of communication network.
4) home gateway sends the service search request to the Service Gateway of television network broadcast.
5) service list that is provided is provided the Service Gateway of computer network.
6) service list that is provided is provided the Service Gateway of communication network.
7) service list that is provided is provided the Service Gateway of television network broadcast.
8) home gateway is integrated and is screened all services in each service list that returns, and only selects optimum for identical service.
9) service list after home gateway will be integrated returns to the user.
After obtaining service list, user's selection respective service is as required used.Concrete use as shown in Figure 7.
Concrete service procedure is described below:
1) domestic consumer selects own required service according to the service list that returns.
2) user sends the use request of selected service to home gateway.
3) home gateway sends corresponding service request according to institute's requested service to the Service Gateway that this service is provided.
4) Service Gateway is verified requestor's identity, judges whether the requestor has the authority of the service used, and checking is by returning the pairing service token of service, if do not pass through the return authorization failure.
5) home gateway is transmitted to the user with the authorization messages that Service Gateway returns.
6) user sends the service use request that has service token to the Internet Service Provider of appointment.
7) Internet Service Provider verifies user's service token, checking by after begin transferring service data, authentication failed sends authorization failure message.
3, the message definition of digital home network service using method
In order to realize serving the reciprocal process of using method, we have defined the message structure of basic messae, and concrete form will elaborate referring to accompanying drawing 8-16.Every message is made up of News Category and message content field, and wherein News Category is used to distinguish different type of messages, and the message content field has then comprised the particular content of this message.
Reference Services provides flow process, and the message that relates in the reciprocal process has:
(1) service registry request message
When equipment need be when the user of digital home provides corresponding service, at first need be and the registration of serving of home gateway place at the application domain center.Registration message has comprised fields such as equipment mark, service identifiers, service name and service content.If also need to add application domain center identification field when the mind-set home gateway is registered in the application domain.The News Category of this message is designated 1.Household equipment is slightly different with " facility registration message " that the application domain center sends, and data packet format is respectively as Fig. 8 and shown in Figure 9.
(2) message is replied in service registry
After the service registry operation was finished, application domain center and home gateway need send service registry to the equipment of applying for the registration of and reply message.Registration is replied message and has been comprised the registering result field.The News Category of this message is designated 2.The data packet format of message as shown in figure 10.
(3) service search request message
Want to use when serving in the digital home when the user of family starts terminal program, at first need to home gateway and application domain administrative center inquire about its kind and the content of service can be provided.Therefore, before selecting to use service, the user need send service search message to home gateway and application domain center.The News Category of this message is designated 3.The data packet format of message as shown in figure 11.
Comprised three types service search request message here: search this territory service, non-this territory service and external web services.Distinguish by type of service field.
(4) service search is replied message
After service-seeking is finished, application domain administrative center and home gateway need return corresponding service list to the user who searches, therefore comprised the service list content in the message, nested again fields such as the service identifiers of every service, service name and service content in the service list content.The News Category of this message is designated 4.The data packet format of message as shown in figure 12.
(5) request message is obtained in service
After the user gets access to service list, select own needed service by the user, and to digital home gateway or the corresponding service of application domain administrative center request.Should comprise service identifiers, service name, 3 elementary fields of user ID in this request message.The News Category of this message is designated 5.The data packet format of message as shown in figure 13.
(6) answer message is obtained in service
When application domain administrative center receives service request information, at first need to verify user's access rights, when user's authority is legal, will send the answer message of authorization service.Authorization result, device identification, 3 elementary fields of service token have wherein been comprised.If illegal, directly send the answer message of authorization failure, this message only need comprise the Authorization result field and get final product.The News Category of this message is designated 6.The data packet format of message as shown in figure 14.
(7) request message is obtained in the service of band service access token
After the user uses authorization of service to pass through, will send service to service specified equipment and obtain request, wherein comprise the service token field.The News Category of this message is designated 7.The data packet format of message as shown in figure 15.
(8) service response message
After equipment receives service response message, at first need to verify user's service token, after checking is passed through, begin to send service response message, wherein comprised the needed data of service interaction.If checking is not passed through, then send the answer message of authorization failure.The News Category of this message is designated 8.The data packet format of message as shown in figure 16.
Symbol description:
PDA:Personal Digital Assistant personal digital assistant
The VOIP:Voice Over Internet Protocol networking telephone
The internet phone of IP:Internet Protocol
OSGI:Open Service Gateway Initiative open service gateway initiative platform
API:Application Programming Interface application programming interfaces
Should be understood that, for those of ordinary skills, can be improved according to the above description or conversion, and all these improvement and conversion all should belong to the protection range of claims of the present invention.