Communication device setting apparatus, communication device setting method, and recording medium.

The present invention relates to a communication device setting device, a communication device setting method, and a communication device setting program, and in particular, a communication device setting device, a communication device setting method, and a communication device for accurately and efficiently performing various settings for a communication device. Regarding the setting program.

Conventionally, a communication device (communication interface) is required to realize wired communication or wireless communication with an external device such as a PC (Personal Computer), a server, a router, or a mobile terminal. Further, in recent years, there are communication devices such as STB (Set Top Box) for receiving various services by connecting to a television and accessing a predetermined server or the like via a communication network or the like.

Usually, a MAC (Media Access Address) address or the like is set in such a communication device in order to individually identify the device. Here, the MAC address can uniquely identify the network interface (node) in the world, and the IEEE Standards Association identifies the manufacturer of the first 24 bits of the total 48-bit data length. The remaining 24 bits are managed by the manufacturer.

Further, when the communication device as described above is shipped, the MAC address is written by the manufacturer in a storage area (memory or the like) such as a network card of the communication device. As a result, various data can be transmitted / received between predetermined communication devices via a communication network (including wired and wireless) on Ethernet.

Further, when communication is performed between communication devices by using encryption or the like, each key information such as the encryption key and the decryption key is also recorded in the storage area of the communication device in the same manner as the MAC address.

Further, conventionally, the work of writing various setting information such as the MAC address and the encryption key to the communication device as described above has been manually performed by the worker. Further, in order to perform the above work manually, the worker or the like directly handles confidential information unique to the device such as MAC address information and key information.

Further, with respect to the above-mentioned key information, it takes a long time for the administrator to input the character string or the private key that is the source of the private key into the communication device. Further, the character string or the private key that is the source of the private key must be visible text data because the administrator directly inputs it to the communication device, and there is a risk of theft.

Therefore, conventionally, a private key management device including a cryptographic unit that encrypts a private key based on device identification information that identifies a communication device and a transmission unit that transmits the private key encrypted by the encryption unit to a communication device. Is disclosed (see, for example, Patent Document 1).

<p><patcit num="1"><text>International Publication No. 2003/101040 Pamphlet</text></patcit></p>

<p num="0010"> However, in the conventional method as shown in Patent Document 1 described above, in order to communicate with the private key management device, the MAC address must be set in advance in the communication device. That is, in Patent Document 1, only the private key is stored, and not even the MAC address that identifies the device is stored. Therefore, it is necessary to set in advance for communication between the private key management device and the communication device. Become. In particular, the above-mentioned MAC address still needs to be set manually. Therefore, an operation error occurs, and it takes a long time for human operation. In addition, there is a problem that management may become complicated.</p><p num="0011"> The present invention has been made in view of the above-mentioned problems, and provides a communication device setting device, a communication device setting method, and a communication device setting program for accurately and efficiently performing various settings for a communication device. The purpose.</p>

<p num="0012"> In order to solve the above-mentioned problems, the present invention employs means for solving the problems having the following characteristics.</p><p num="0013"> The invention according to claim 1 is the communication device (21) activated by turning on the power in the communication device setting device (21) for registering predetermined setting information in the communication device (12) connected via the communication network. The access from (12) is recognized, individual setting information is acquired for each device including the MAC address from the list information set in advance at the time of recognition, and based on the acquired setting information, the communication device (12) A device setting means (35) that sets a device for the device, and a setting management means that changes the list information based on the information set by the device setting means (35) and manages the communication device based on the list information. The setting management means (36) is stored in advance in the storage means (33) according to the state in which the setting information is written to the communication device (12) by the device setting means (35). The list information is changed based on the setting information accumulated in a predetermined folder area among a plurality of provided folder areas, and the key information is further acquired from the file name of the key information included in the list information. The key information generating means (34) for encrypting the acquired key information is included, and the setting information includes the encrypted key information obtained by the key information generating means (34), and the key. The information generation means (34) stores each of the key information before and after encryption before setting in the communication device (12) in different folder areas of the storage means (33), and the device setting means (35). After writing the setting information including the encrypted key information to the communication device (12), the storage means (12) stores the key information before and after the encryption stored in the different folder areas. It is characterized in that it is moved to a different folder area for writing provided in 33) and stored.</p><p num="0015"> The invention according to claim 2 is characterized in that the key information includes an HDCP key and / or a MARLIN key.</p><p num="0016"> In the invention described in claim 3, the device setting means (35) generates instruction information for acquiring the setting information from the communication device (12) side, and the generated instruction information is used as the communication device (12). It is characterized by outputting to 12).</p><p num="0017"> The invention according to claim 4 is characterized in that the address information of the communication device setting device (21) is the address information for accessing the HTTP server in which the communication device is registered in advance.</p><p num="0018"> The invention according to claim 5 is characterized in that the communication device (12) is at least one of an STB, a TV, a PC, a mobile terminal, and a game device.</p><p num="0019"> The invention according to claim 6 is an access from the communication device activated by turning on the power in a communication device setting method for registering predetermined setting information in a communication device (12) connected via a communication network. Is recognized, individual setting information is acquired for each device including the MAC address from the list information set in advance at the time of recognition, and the device setting is set for the communication device (12) based on the acquired setting information. The setting management step includes a device setting step to be performed, a setting management step of changing the list information based on the information set by the device setting step, and managing the communication device (12) based on the list information. Is stored in a predetermined folder area among a plurality of folder areas provided in advance in the storage means (33) according to the writing state of the setting information to the communication device (12) by the device setting step. It has a key information generation step of changing the list information based on the setting information, acquiring the key information from the file name of the key information included in the list information, and encrypting the acquired key information. The setting information includes the encrypted key information obtained by the key information generation step, and the key information generation step is the key information before and after encryption before setting in the communication device (12). Each is stored in a different folder area of the storage means (33), and the device setting step writes the setting information including the encrypted key information to the communication device (12), and then the different folder area. Each of the key information before and after the encryption stored in the storage means (33) is moved to a different folder area for writing and stored in the storage means (33).</p><p num="0021"> The invention according to claim 7 is characterized in that the key information includes an HDCP key and / or a MARLIN key.</p><p num="0022"> In the invention according to claim 8, the device setting step generates instruction information for acquiring the setting information from the communication device (12) side, and the generated instruction information is transmitted to the communication device (12). It is characterized by outputting.</p><p num="0023"> The invention according to claim 9 is a communication device setting program for causing a computer to function as the communication device setting device (21) according to any one of claims 1 to 5.</p><p num="0024"> It should be noted that the reference reference numerals are merely for reference, and the present invention is not limited to the illustrated embodiment.</p>

<p num="0025"> According to the present invention, various settings for communication equipment can be performed accurately and efficiently.</p>

<figref num="1">It is a figure which shows an example for demonstrating the communication equipment setting system in this embodiment.</figref><figref num="2">It is a figure which shows an example of the functional structure of the communication equipment setting device.</figref><figref num="3">It is a figure which shows an example of the hardware configuration which can realize the communication device setting process in this embodiment.</figref><figref num="4">It is a figure which shows an example of the hardware configuration of STB in this embodiment.</figref><figref num="5">It is a sequence chart which shows an example of the communication device setting processing procedure in this embodiment.</figref><figref num="6">It is a figure for demonstrating the communication device setting processing procedure in this embodiment.</figref><figref num="7">It is a figure which shows an example of the management list in this embodiment.</figref>

&lt;About the present invention&gt; The present invention can be used, for example, in a manufacturing process or maintenance of a communication device, and specifically, has at least one of the following four functions.

First, the first function automatically writes key information such as a MAC address and a DRM (Digital Rights Management) key to a communication device such as an STB or a digital TV (TV: television receiver). As a result, all the work that the worker has conventionally written the MAC address and the like by a predetermined operation is automated. Further, as will be described later, various unique setting information required for the communication device such as the MAC address, serial number, and DRM key can be automatically written by simply turning on the power of the communication device to be written.

The second function also automatically encrypts the key information to be written. In addition, when writing the key information, the information necessary for encryption is acquired from the target communication device, and the key information is automatically encrypted.

The third function automatically manages various setting information such as MAC address and key information. That is, various setting information such as a writing schedule and a written MAC, DRM key, etc. are automatically managed in the target communication device. Specifically, for example, a management list (list information) is automatically created, or a preset management list is acquired from an external device, and the written keys and the like are moved to another directory for sorting.

Further, the fourth function is to provide the communication device setting device in the present invention with the same address information as the HTTP (Hyper Text Transfer Protocol) server that originally automatically accesses the above operation when the power of the communication device is turned on. Set. As a result, when the power of the communication device is turned on and started by using the initial operation contents preset in the communication device, the communication device setting device is automatically accessed, and the HTTP server is simulated there. The MAC address and key information are set in the communication device. It should be noted that these processes are performed as a part of the manufacturing process of the communication device, and can also be performed when the communication device is reset.

Here, the communication devices applicable in the present invention include, for example, in addition to the STB described above, a game machine capable of data communication using a communication network, a mobile phone, a mobile player (contents such as music and video). It can be applied to all communication devices capable of communicating by a predetermined protocol such as Ethernet (registered trademark), such as mobile terminals (including playback devices), PCs, digital TVs, and the like. Further, the key information includes, for example, an HDCP (High-Bandwise Digital Contact Protection) key, a CE (Consumer Electronics) device, a MARLIN key which is a content management method for multimedia services, and the like. Hereinafter, a communication device setting device, a communication device setting method, and a mode in which the communication device setting program for realizing the above-mentioned features is preferably implemented will be described with reference to drawings and the like.

&lt;The present embodiment&gt; First, an example of the communication device setting system in this embodiment will be described with reference to the drawings. FIG. 1 is a diagram showing an example for explaining a communication device setting system according to the present embodiment. Here, in this embodiment, STB is used as a communication device. The STB is usually used in the configuration of a content providing system or the like as shown in FIG. 1 (a).

The content providing system 10 shown in FIG. 1A includes an HTTP server 11, a plurality of STB12-1, 12-2, ..., 12-n, and a number of TV13-1, TV13-2 corresponding to STB12. , ..., TV13-n, and the HTTP server 11 and STB12 are connected to each other in a state where data can be transmitted and received by a communication network 14 using an Ethernet protocol typified by the Internet or the like. Has been done.

The HTTP server 11 provides various contents such as digital broadcasting to TVs 13-1 to 13-n via STB12-1 to 12-n through the communication network 14, and manages user information and the like of the connected STB12. Web server for. The HTTP server 11 may be a broadcasting station or the like that provides a broadcasting program. That is, the HTTP server 11 provides not only digital broadcasting but also various contents such as display of objects such as HTML and images and videos. Therefore, the HTTP server 11 is individually managed for each content provider, and it is possible to manage and set what kind of data is provided to the user or the like who uses the STB12.

Further, when the HTTP server 11 performs a content providing service such as limited reception, the data provided in advance is encrypted and transmitted, and the data is decrypted by the decryption key (private key) or the like recorded in advance on the STB12 side. The decrypted content is output to the TV 13. As a result, the TV 13 can display only the decrypted content on the screen, and can provide information by limiting the user who is a viewer for each STB 12.

The HTTP server 11 is provided with a service program or the like that provides content for performing the above-mentioned processing, and each processing is executed through the program.

The STB 12 decodes the content data obtained from the HTTP server 11 corresponding to each TV 13 to which it is connected, sets the state of the display screen, and outputs the set information to the TV 13.

The TV 13 is a display means for displaying the content information from the HTTP server 11. Therefore, the display means in the present invention is not limited to the TV 13 (television) described above, and may be any device provided with a general display such as a PC or a PDA (Personal Digital Assistant). The STB 12 and the TV 13 described above may be integrally configured.

Here, the STB 12 has identification information such as address information in advance in order to send and receive data to and from the HTTP server 11, and that is the MAC address and the like described above. That is, the HTTP server 11 can identify each STB12-1 to 12-n by the MAC address, and thereby can provide the content to a predetermined user.

In the STB 12 used in the system configuration as described above, it is necessary to set various setting information of the unique secret such as the MAC address and the key information described above in advance before shipping. Therefore, in the present embodiment, by using the communication device setting system 20 as shown in FIG. 1 (b), the setting for the communication device is performed accurately and efficiently.

The communication equipment system 20 shown in FIG. 1B is configured to include a communication equipment setting device 21 and a transportation means 22 such as a belt conveyor that conveys a plurality of STBs 12-1 to 12-n.

Address information such as an IP address corresponding to the above-mentioned HTTP server 11 is set in advance in the communication device setting device 21. This address information is different for each content provider, for example, but since fixed access destination address information is set in advance for each content provider in each STB12-1 to 12-n, the address is the same. The address information according to the information is also set in the communication device setting device 21. Thereby, in the present embodiment, the STB 12 can access the communication device setting device 21 shown in FIG. 1 (b) in a state of accessing the HTTP server 11 shown in FIG. 1 (a) at the time of startup. become.

The communication device setting device 21 stores a plurality of address information in advance corresponding to a plurality of content providers and the like, and among the plurality of address information, each STB12-1 to 12- for which various settings are made. It is also possible to appropriately select the address information corresponding to the address information of the communication destination recorded in n.

Further, in the communication device setting system 20 shown in FIG. 1B, in order to enable mass production work of a plurality of STB12-1 to 12-n, MACs are continuously applied to the plurality of STB12-1 to 12-n. It is necessary to register the settings such as address and key information. That is, the setting and registration are individually performed for the STB 12 continuously transported by the transport means 22.

In this embodiment, even if the official MAC address is not yet set in STB12 using the communication device setting system 20, the communication device setting device 21 and STB12 are one-to-one using, for example, Ethernet navel 23. Dummy MAC addresses are set in advance for each of the plurality of STBs 12-1 to 12-n so that they can be connected with. As a result, the communication device setting device 21 and the STB 12 can transmit and receive data. Further, the dummy MAC addresses set in each of STB12-1 to 12-n are all the same addresses.

Further, in the communication device setting system 20, setting information is registered for each STB 12 based on various setting information such as MAC address and key information shown in the management list stored in advance in the communication device setting device 21. The result is stored in the communication device setting device 21 by log information or the like.

In the communication device setting system 20, when a plurality of STB12-1 to 12-n are continuously transported to the communication device setting device 21 by the transport means 22, one of the STB 12 and the communication device setting device 21 can be manually connected to the communication device setting device 21 via Ethernet. Just by connecting at 23 and turning on the power of the connected STB12, the above-mentioned various setting information is automatically accumulated in the STB12.

&lt;Example of functional configuration of communication device setting device 21&gt; Next, a functional configuration example of the communication device setting device 21 shown in FIG. 1B will be described with reference to the drawings. FIG. 2 is a diagram showing an example of the functional configuration of the communication device setting device. The communication device setting device 21 shown in FIG. 2 includes an input means 31, an output means 32, a storage means 33, a key information generating means 34, a device setting means 35, a setting management means 36, and a communication interface means 37. , And control means 38.

The input means 31 accepts inputs such as start / end of various instructions such as a key information generation instruction, a device setting instruction, and a setting management instruction from a user or the like. The input means 31 includes, for example, a keyboard, a pointing device such as a mouse, or the like.

The output means 32 displays and outputs the contents input by the input means 31 and the contents executed based on the input contents. The output means 32 includes a display, a speaker, and the like. Further, the output means 32 may have a function such as a printer. In that case, various information obtained in the present embodiment such as a device setting result and log information is printed on a print medium, and the user or the user can print the information. It can also be provided to users and the like.

The input means 31 and the output means 32 may be integrated input / output means such as a touch panel, and in this case, a predetermined input / output means may be used by using a user's finger, a pen-type input device, or the like. You can input by touching the position.

The storage means 33 includes key information obtained by the key information generation means 34, a management list for registering various settings to the communication device, log information, various programs such as a management application executed in the present embodiment, and the like. Various data obtained in the present embodiment and various data necessary for implementing the present embodiment are accumulated. In addition, the storage means 33 can read various stored data as needed.

Further, the storage means 33 sets a plurality of folder areas in advance, such as an application folder, a pre-writing KEY storage folder, a written KEY storage folder, a writing encryption KEY folder, and a written encryption KEY folder. Predetermined data can be accumulated for each area.

The key information generation means 34 generates key information (HDCP key and / or MARLIN key, etc.) to be recorded for each communication device. Specifically, the key information generation means 34 generates a predetermined encryption key or decryption key (private key) using the key file information or the like stored in a preset management list or the like, and sets the file name as the key information generation means 34. The key information itself is stored in the storage means 33.

The device setting means 35 generates a command so that the target communication device STB 12 automatically acquires the key information stored in the predetermined area of the storage means 33, and the command information is used as the communication interface. Output to the currently connected STB 12 via means 37.

The command generated by the device setting means 35 is a command for transferring general data in a preset program such as UNIX (registered trademark), and is transmitted from the HTTP server 11 to the STB12. Similar to the commands you can do.

As a result, the STB 12 executes the command execution command from the communication device setting device 21 as if the command execution command from the HTTP server 11 executes a predetermined command without any special control. Various setting information such as MAC address and key information stored in the area can be acquired and stored in a storage means such as EEPROM (Electrically Erasable Program Read Only Memory), NAND flash, NOR flash, or the like. More specifically, for example, the key information is set in the above-mentioned NAND flash or NOR flash.

The setting management means 36 manages whether or not the setting information registration process to the STB 12 performed by the device setting means 35 or the like is completed. Specifically, the setting management means 36 is assigned what kind of MAC address and key information for each communication device (STB) based on list information such as a preset management list, and is accumulated at what time. Accumulates various setting information for communication devices such as the key. A specific example of the management list will be described later.

Further, the communication interface means 37 is connected to the STB 12 by an Ethernet cable or the like to transmit / receive data. The communication interface means 37 may be connected to the STB 12 by wire or may be connected to the STB 12 wirelessly.

Further, the control means 38 controls the entire constituent unit of the communication device setting device 21. Specifically, the control means 38 performs processing such as writing and encryption of various setting information by negotiating with STB12.

&lt;Communication device setting device 21: Hardware configuration&gt; Here, in the communication device setting device 21 described above, an execution program (communication device setting program) capable of causing a computer to execute each function is generated, and the execution program is installed on, for example, a general-purpose personal computer, a server, or the like. Thereby, the communication device setting in the present invention can be realized.

Here, an example of a computer hardware configuration capable of realizing the communication device setting process in the present embodiment will be described with reference to the drawings. FIG. 3 is a diagram showing an example of a hardware configuration capable of realizing the communication device setting process in the present embodiment.

The computer body in FIG. 3 includes an input device 41, an output device 42, a drive device 43, an auxiliary storage device 44, a memory device 45, a CPU (Central Processing Unit) 46 that performs various controls, and a network connection device. It is configured to have 47 and these are interconnected by system bus B.

The input device 41 has a pointing device such as a keyboard and a mouse operated by a user or the like, and inputs various operation signals such as execution of a program from the user or the like.

The output device 42 has a display that displays various windows, data, and the like necessary for operating the computer body for performing the processing according to the present invention, and displays the execution progress and results of the program by the control program that the CPU 46 has. can do. Further, the output device 42 can print the above-mentioned processing result or the like on a printing medium such as paper and present it to the user or the like.

Here, the execution program installed in the computer body in the present invention is provided by, for example, a USB (Universal Serial Bus) memory, a portable recording medium 48 such as a CD-ROM, or a DVD. The recording medium 48 on which the program is recorded can be set in the drive device 43, and the execution program included in the recording medium 48 is installed from the recording medium 48 into the auxiliary storage device 44 via the drive device 43.

The auxiliary storage device 44 is a storage means such as a hard disk, and can store the execution program in the present invention, the control program provided in the computer, and the like, and perform input / output as needed.

The memory device 45 stores an execution program or the like read from the auxiliary storage device 44 by the CPU 46. The memory device 45 includes a ROM (Read Only Memory), a RAM (Random Access Memory), and the like.

The CPU 46 controls the processing of the entire computer, such as various operations and data input / output with each hardware component, based on a control program such as an OS (Operating System) and an execution program stored in the memory device 45. Each process can be realized. It should be noted that various information and the like required during the execution of the program can be acquired from the auxiliary storage device 44, and the execution result and the like can also be stored.

The network connection device 47 acquires an execution program from another terminal or the like connected to the communication network by connecting to a communication network or the like, or an execution result obtained by executing the program or execution in the present invention. The program itself can be provided to other terminals and the like. Further, the network connection device 47 can, for example, send / receive data to / from a connected communication device, acquire a management list from another terminal, and output log information.

With the hardware configuration as described above, the communication device setting process according to the present invention can be executed. Further, by installing the program, the communication device setting process in the present invention can be easily realized on a general-purpose personal computer or the like.

&lt;Communication equipment: Hardware configuration&gt; Next, the hardware configuration of STB12, which is a communication device in the present embodiment, will be specifically described with reference to the drawings. FIG. 4 is a diagram showing an example of the hardware configuration of the STB in the present embodiment.

The STB 12 shown in FIG. 4 displays an antenna unit 51, a tuner unit 52, a demodulation unit 53, a CPU 54, a communication interface unit 55, an infrared signal receiving unit 56, a NAND flash 57, an EEPROM 58, and a RAM 59. It is configured to have a part 60 and the like. The NAND flash 57, the EEPROM 58, and the RAM 59 are storage means in the STB 12.

The antenna unit 51 is a broadcast signal receiving means for receiving a broadcast signal or the like transmitted by radio waves. The antenna unit 51 outputs the received signal to the tuner unit 52.

The tuner unit 52 extracts the broadcast signal of the channel selected by the user from the broadcast signals received by the antenna unit 51 or preset in the STB 12 by the control signal from the CPU 54.

The demodulation unit 53 demodulates the broadcast signal extracted by the tuner unit 52 according to the broadcasting system by the control signal from the CPU 54. At this time, the demodulation unit 53 can also acquire the key information stored in the NAND flash 57 and perform a process of decoding the encrypted signal.

The CPU 54 is a control means for controlling the processing of the entire configuration in the STB 12. Specifically, the CPU 54 controls the tuner unit 52 and the demodulation unit 53 to receive a predetermined broadcast signal corresponding to the instruction content based on the instruction content from the user obtained by, for example, the infrared signal reception unit 56. A signal is transmitted, key information obtained from the NAND flash 57 is transmitted to the demodulation unit 53 to extract a predetermined broadcast signal, and the content (program) obtained from the demodulation unit 53 is connected by the communication interface unit 55. It performs processing such as outputting to the TV 13, reading and writing various information from the EEPROM 58, RAM 59, etc. as necessary, and outputting the instruction content from the user obtained by the infrared signal receiving unit 56 to the display unit 60. ..

The communication interface unit 55 is an interface circuit for transmitting and receiving data to and from other devices on Ethernet, for example, and transmits and receives data to and from, for example, the HTTP server 11.

The infrared signal receiving unit 56 receives an infrared signal format instruction signal transmitted from an operating means such as a remote control, converts the instruction signal into a normal digital signal, outputs the instruction signal to the CPU 54, and the CPU 54 digital signals. The control corresponding to is performed.

The NAND flash 57 records various setting information such as the above-mentioned key information by the control signal from the CPU 54. The NAND flash 57 may be a flash memory such as a NOR flash.

The EEPROM 58 records various setting information such as a MAC address as described above by a control signal from the CPU 54. In addition, the EEPROM 58 can change the screen size and resolution settings when outputting to the TV 13 included in the STB12, change the contrast settings, change the volume intensity setting, switch between HD video / SD video, and HDMI (High-). It is also possible to change various settings such as Definition Multimedia Interface) and I-LINK. In addition, the EEPROM 58 can also store various programs required in the present embodiment.

The EPROM 58 is capable of further erasing and rewriting what was written in the EPROM (Erasable and Programmable ROM). In addition, EPROM is a program modification or specification change as much as the data can be rewritten, compared to a mask ROM that writes data at the time of chip manufacturing and a PROM (Programmable ROM) that can be written only once and cannot be changed. It has the advantage of being able to deal flexibly with. In the present invention, the invention is not limited to the EEPROM 58, and the above-mentioned mask ROM or PROM may be used.

The RAM 59 is a storage means for writing and reading a program for executing each process in the present embodiment by a control signal from the CPU 54. For example, a viewing history of a content program viewed by the TV 13 or a channel change. Store various data such as. Although SRAM, DRAM, and the like can be used as the RAM 59, the present invention is not limited to this.

The display unit 60 displays a channel number of a broadcast program output to the TV 13, a content (program) content, a list of content names, various messages, and the like by a control signal from the CPU 54.

&lt;Communication device setting processing procedure&gt; Next, the communication device setting processing procedure during the manufacturing process in the above-described embodiment will be specifically described with reference to the drawings. FIG. 5 is a sequence chart showing an example of the communication device setting processing procedure in the present embodiment. Further, FIG. 6 is a diagram for explaining a communication device setting processing procedure in the present embodiment. The communication device setting processing procedure in the present embodiment will be specifically described with reference to FIGS. 5 and 6.

The communication device setting device 21 shown in FIG. 6 has a plurality of folder areas in advance, such as an application folder, a pre-writing KEY storage folder, a written KEY storage folder, a writing encryption KEY folder, and a written encryption KEY folder. It is set, and various information is accumulated corresponding to each area.

First, the communication device setting processing procedure shown in FIG. 5 has the same address information as the preset HTTP server 11 when the STB12 starts the power supply (S01), and is connected to the STB12 by an Ethernet cable or the like. Access the communication device setting device 21 (S02).

Next, when the communication device setting device 21 recognizes the access from the STB12, it checks the preset management list (S03), acquires the MAC address information to be set next, and shows the management list. The key information stored in advance is acquired from the preset file name of the key information before encryption, and the acquired key information is encrypted (S04). Further, in order to write various setting information such as MAC address and encrypted key information to STB12 which is a communication device, it is stored in a storage area such as a writing folder preset in the storage means 33 (S05).

After that, from STB12, the instruction information and the like for acquiring the data stored in the storage area such as a predetermined forter by the processing of S05 and accumulating in STB12 are generated (S06), and the generated instruction information is connected. It is transmitted to STB12 (S07). The instruction information means one or a plurality of commands, an execution batch file, or the like for executing a process of acquiring and storing a file from the outside by, for example, UNIX. Further, the parameter of the instruction information includes at least one of the address and file name of the storage area, the address information of the NAND flash 57 or the EEPROM 58 to be stored, and the like.

Next, the STB 12 executes an instruction based on the instruction information obtained from the communication device setting device 21, accesses the communication device setting device 21 (S08), and acquires various setting information in a predetermined storage area (S08). S09), the acquired various setting information is recorded in a preset storage area such as a NAND flash 57 or EEPROM 58 or a storage area set by instruction information (S10). Further, the STB 12 outputs information indicating that the recording is completed to the communication device setting device 21 (S11).

Further, when the communication device setting device 21 acquires the recording completion information from the STB 12 by the processing of S11, the communication device setting device 21 moves the storage folder of various setting information and stores it in the written folder (S12). In the process of S12, the key information before being encrypted is also moved to a predetermined folder. As a result, the contents of the actually saved setting information can be confirmed, and accurate management of key information and the like can be realized. Therefore, operations such as confirmation by the setting manager can be performed accurately and efficiently.

Further, the communication device setting device 21 generates log information (S13). Further, when the registration of the setting information is completed by each of the above-mentioned processes, the communication device setting device 21 connects to another STB 12 and repeats the above-mentioned processes. In the present embodiment, when an error occurs in any of the processes S01 to S13 described above, a corresponding error message is generated and output to the screen, or a voice such as a preset warning sound is generated. Can be output.

Further, the communication device in which the error occurs is removed on the spot, and the next STB 12 is connected to the communication device setting device 21 to perform the above-described processing. In this case, the fact that an error has occurred is recorded in a log, etc., but instead of assigning the next number to the management list, the number that could not be set properly is assigned to another communication device (STB). Can be assigned. In other words, even if an error occurs, only the communication device in which the error occurred is removed from the manufacturing process, and the registration of various setting information is sequentially performed for the next communication device without any special processing. By assigning a MAC address, serial number, key information, etc. to, quick processing can be realized.

Further, when the setting cannot be registered due to a communication trouble or the like, the communication device can be reset after the setting of the communication device is completed by a series of assembly line work. However, in that case, the setting information in which the error occurred last time is not used as it is, but the setting is performed using the new setting information. As a result, the management itself can be prepared and accurately performed.

Next, when the communication device setting processing procedure in the present embodiment is specifically described with reference to FIG. 6, the operation at the time of writing DRM-KEY (key information) is as follows. According to the setting processing procedure in this embodiment, after writing the MAC address and serial number, the DRM key (hereinafter referred to as KEY) which is the key information is written.

First, as described above, after the STB 12 accesses the communication device setting device 21 at the time of startup, when the server thread of the management application recognizes the access of the STB 12, the communication device setting device 21 starts the MAC address writing process.

Next, the communication device setting device 21 searches the management list shown in FIG. 6 and acquires the MAC address to be written and the file name of each KEY. Next, the KEY to be written is encrypted, and the encrypted KEY is stored in a predetermined folder. In the example shown in FIG. 6, the KEY before and after encryption is stored in a predetermined folder.

Next, the communication device setting device 21 causes the STB 12 to capture the encrypted KEY "WriteKey (encryption)" into the STB 12 and write it by a mount instruction for mounting a predetermined forter of the communication device setting device 21. Specifically, the STB 12 mounts the folder containing the encrypted KEY by NFS (Network File System), executes the KEY writing command, and actually writes the KEY in the communication device setting device 21.

Next, after the writing by the STB 12 is completed, the communication device setting device 21 moves the encrypted KEY from the "writing encryption KEY folder" shown in FIG. 6 to the "written encrypted KEY storage folder". In this case, move with the original file name (KEY01). As a result, the file name is not complicated and management can be facilitated. Further, as described above, the communication device setting device 21 moves the KEY before encryption to a predetermined folder in which the written KEY is saved. After writing, the "WriteKey" file in the write encryption KEY folder is deleted.

That is, according to the present embodiment, the step of recognizing the access to the communication device setting device 21 from the STB 12 started by turning on the power and starting the process of writing the MAC address, KEY (key information), etc., and the communication device. The setting device 21 searches the management list and acquires the MAC address and KEY to be written, the step of encrypting the KEY to be written and placing the encrypted KEY in a predetermined folder, and the encrypted KEY from the predetermined folder. To write to STB12, and after the writing to STB12 is completed, the encrypted KEY and the unencrypted KEY are moved to the corresponding written folders and stored. You can set the device. As a result, the setting information can be registered accurately and efficiently.

In the present embodiment, the encrypted KEY and the unencrypted KEY are stored in the corresponding written folders, so that the KEY can be managed with high accuracy. It is not limited, and for example, either one of the encrypted KEY and the unencrypted KEY may be stored in the written folder, and when it ends normally, both KEY information is deleted. You may.

&lt;About management list (list information)&gt; Here, the above-mentioned management list will be described with reference to the drawings. FIG. 7 is a diagram showing an example of a management list according to the present embodiment. Note that FIG. 7A shows various information before device setting, and FIG. 7B is a diagram showing an example of a management list during device setting.

As shown in FIG. 7A, the data groups of various setting information in the management list before device setting are, for example, "MAC address", "HDCP key file name", "MARLIN key file name", and "write state". It consists of items such as ". That is, in the present embodiment, for example, the above-mentioned MAC address and the actual key information included in the file of "HDCP key file name" and / or the actual key information included in the file of "MARLIN key file name" are used. As various setting information, when the STB12 is connected to the STB12 and the STB12 is started, the above-mentioned writing (registration) process of the setting information is performed. In the state where the writing process has not been performed even once, the writing state of the management list is all unreg (unregistered).

When a plurality of communication device setting information is set, the list information is overwritten on the management list according to the stage as shown in FIG. 7B, as shown below. Specifically, the data group of various setting information in the management list during device setting shown in FIG. 7B includes "factory name", "written date and time information", "serial number", "MAC address", and " It consists of items such as "HDCP key file name" and "MARLIN key file name".

That is, in the example of FIG. 7B, it is shown that the registration of the setting information is completed for the five STBs. By overwriting the data in this way, it is possible to easily grasp how many STBs have been set at the present time.

The data item contents, order, data structure, etc. are not limited to this in the present invention, and for example, an IP address or the like can be registered as setting information. Further, when it is not necessary to set the above-mentioned key information in STB12, the key information is not included in the management list of FIG. Further, in the present embodiment, information on other key information and other items may be included in the management list.

For example, by applying this embodiment, setting of screen size and resolution stored in EEPROM, setting of contrast, setting of volume intensity, switching between HD video / SD video, HDMI (High-Definition Multimedia Interface) , I-LINK and other settings can be registered or changed.

As described above, according to the present invention, various settings for the communication device can be performed accurately and efficiently. Specifically, in the present invention, when writing the MAC address, key information, etc., it is possible to automatically search for what is to be written, encrypt it, and write it, so that a mistake in writing the MAC address and key information (2) Double writing, omission, etc.) can be eliminated. In addition, since the writing operation is always performed automatically in the shortest time, a significant reduction in labor and time can be expected.

Further, according to the present invention, since the server can automatically manage and sort the MAC address, key information, etc. at the time of writing, humans do not directly handle the data, which is effective from the viewpoint of security protection. Yes, and there are no management mistakes.

That is, according to the present invention, the operator only connects the target communication device via Ethernet, turns on the power, and starts the communication device, and does not perform any other operations such as writing. Therefore, it is unlikely that an operation error will occur. In addition, when the power switch of the target device is turned on, the search, writing, and management are all performed automatically, so the tact is minimized, and the operator does not need to be aware of data management at all. Therefore, management mistakes do not occur, and the labor and time required for management are reduced. Further, according to the present invention, since a third party cannot see the data or the like, the security problem is solved.

Further, according to the present invention, a series of processes up to management can be performed by using a communication device setting device that is pseudo-HTTP server, and the processes can be performed like an HTTP server. Therefore, not only the line process but also general processes can be performed. The present invention can be applied to, for example, maintenance by putting it into the system of.

Further, the present invention applies the above-described embodiment to automatically change the initial settings of communication devices such as STBs, and STB's own software is periodically or at a predetermined timing according to an execution instruction or the like. Can be updated.

Further, since the digital TV is also equipped with an Internet function in the present invention, it can be applied to digital home appliances such as thin digital TVs compatible with the Internet, to PCs and mobile terminals, and to be a communicable game. It can be applied to devices and the like. In the case of the above-mentioned communication device, the access location is different at the same time when the power is turned on. Therefore, a menu screen or the like for setting is prepared in advance, and when an item such as "initial setting change" is set on the menu screen, a communication device setting device is used to perform the above-described processing of the present invention. It is possible to access using the address of 21 and execute the above-mentioned process by the communication device setting device 21.

Further, the present invention can be widely applied to the writing work and management of device-specific security information of an IP receiver (equipped with a Web browser capable of decoding HTML) equipped with embedded software.

Although the preferred embodiments of the present invention have been described in detail above, the present invention is not limited to the specific embodiment, and various modifications and variations are made within the scope of the gist of the present invention described in the claims. It can be changed.

10 Content provision system 11 HTTP server 12 STB 13 TV 14 Communication network 20 Communication equipment setting system 21 Communication equipment setting device 22 Transport means 23 Ethernet navel 31 Input means 32 Output means 33 Accumulation means 34 Key information generation means 35 Device setting means 36 Setting management means 37 Communication interface means 38 Control means 41 Input device 42 output device 43 drive device 44 Auxiliary storage 45 Memory device 46,54 CPU 47 Network connection device 48 Recording medium 51 Antenna part 52 Tuner section 53 Demodulation unit 55 Communication interface section 56 Infrared signal receiver 57 NAND flash 58 EEPROM 59 RAM 60 Display