UPnP Media Server Access Control via Dynamic URI Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing media sharing systems using UPnP/DLNA standards lack effective security measures, allowing other control points to guess or intercept URIs and steal protected media resources from media servers.

Innovation Solution

Implementing a media resource access control method where a UPnP media server verifies to-be-verified information using preset verification information, involving encryption and hash algorithms, to ensure only authorized control points can access media resources, by generating and using a first character string that includes a URI, random number, and control point identifier, encrypted with a private key, and decrypting with a public key for verification.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If UPnP/DLNA standard is used for media sharing, then media resource sharing capability is improved, but security against unauthorized access deteriorates

Engineering Contradiction:

Improvemedia sharing capabilityVSAvoidmedia resource security

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent applies preliminary action by pre-generating verification information (hash values) for each media resource on the media server before any access requests occur. When a control point wants to access a media resource, it requests the corresponding verification information, which is then used to generate dynamic URIs. This preliminary preparation of verification data enables secure access control from the outset, preventing unauthorized access while maintaining the media sharing functionality of UPnP/DLNA.

Inventive Principle:

Principle #10Preliminary action

2Ease of operation

If URI is made publicly accessible for media playback, then ease of operation is improved, but vulnerability to interception and guessing increases

Engineering Contradiction:

Improvemedia access convenienceVSAvoidURI interception risk

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent implements dynamics by making URIs dynamic rather than static. Each URI is generated on-demand by combining a base URI with a randomly generated number, creating a unique dynamic URI for each access request. This dynamic URI generation ensures that even if one URI is intercepted, it cannot be reused for unauthorized access, as the next URI will be different. This maintains ease of operation for authorized users while preventing interception attacks.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent introduces an intermediary mechanism - the verification information (hash value) - that acts as a mediator between the media resource and the URI. Instead of directly exposing static URIs, the system uses verification information to generate dynamic URIs through a computational process involving hash algorithms and random numbers. This intermediary layer prevents direct interception and guessing of media resource locations while maintaining convenient access for authorized control points.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If verification mechanism is implemented, then security is improved, but system complexity increases

Engineering Contradiction:

Improveaccess control securityVSAvoidverification system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies mechanics substitution by replacing complex cryptographic verification mechanisms with a simplified hash-based verification system. Instead of using traditional encryption/decryption pairs or complex authentication protocols, the system uses hash algorithms (MD5, SHA-1, or SHA-256) to generate verification information from control point identifiers and random numbers. This substitution maintains strong security while significantly reducing computational complexity and implementation difficulty compared to conventional cryptographic approaches.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS9152804B2Media resource access control method and device

Publication Date: 2015.10.06 HUAWEI DEVICE CO LTD

AI summary

A media resource access control method and device, where the method includes: receiving, by a universal plug and play (UPnP) media server, a media resource identifier sent by a control point and acquiring preset verification information corresponding to the media resource identifier; receiving a media resource acquisition request sent by a UPnP media player, where the media resource acquisition request contains to-be-verified information; and verifying the to-be-verified information by using the preset verification information, and if the verification is passed, sending a media resource corresponding to the media resource identifier to the UPnP media player.