Apparatus and method for autorizing access to a service according to device proximity

• US 10,028,201 B2
• Filed: 06/27/2017
• Issued: 07/17/2018
• Est. Priority Date: 06/28/2016
• Status: Expired due to Fees

• Current Assignee: InterDigital Patent Holdings, Inc. (InterDigital, Inc.)
• Original Assignee: Thomson Licensing (Vantiva SA)
• Inventors: Fontaine, Patrick, Vigouroux, Jean-Ronan, Le Merrer, Erwan
• Primary Examiner(s): Yun, Eugene
• Application Number:
  US15/633,874
• Publication Number:
  US 20170374605A1
• Time in Patent Office: 385 Days
• Field of Search: 455 412
• CPC Class Codes: H04L 43/0852 Delays
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 65/611 for multicast or broadcast systems for broadcast or conference H04L12/18; arrangements for broadcast or distribution combined with broadcast H04H20/00; arrangements for broadcast applications with a direct linkage to broadcast information or to broadcast space-time H04H60/00; selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS], H04W4/06
• CPC Class Codes: H04N 21/00 Selective content distribution, e.g. interactive television or video on demand [VOD] real-time bi-directional transmission of motion video data H04N7/14 ; broadcast or conference over packet switching networks H04L12/18
• CPC Class Codes: H04N 21/64723 Monitoring of network processes or resources, e.g. monitoring of network load traffic related reporting in data switching networks H04L43/062
• CPC Class Codes: H04N 21/64776 for requesting retransmission, e.g. of data packets lost or corrupted during transmission from server ARQ protocols H04L1/18; implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP] H04L69/16
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/06 Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 56/001 Synchronization between nodes
• CPC Class Codes: H04W 76/14 Direct-mode setup
• CPC Class Codes: H04W 76/40 for selective distribution or broadcast
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 84/20 : Master-slave selection or change arrangements

Abstract

A device and a method for authorizing access to a service on a first device upon detection of a second device located in near proximity, while preferably using broadcast transmission, is disclosed. The second device broadcasts on a second broadcast network a message comprising at least a group identifier common to the set of devices that can access the service and a time reference value corresponding to the emission time of the message, according to a common time reference received by all devices from a first broadcast network. The first device authorizes access to the service only if the group identifier received from the message is the same as the group identifier of the device and if the delay between the measured arrival of the message and its emission time is lower than a threshold.

Claims

1. A method for controlling access to a service on a first device, comprising at a processor of the first device:

obtaining a time reference through a first broadcast communication network;

obtaining a message from a second device through a second broadcast communication network, wherein the message comprises at least a group identifier common to a set of devices for which the service is authorized and an emission time of the message on the second broadcast communication network, where the emission time is given with reference to the time reference obtained from the first broadcast communication network;

determining a transmission delay between the emission time of the message and an arrival time of the message, wherein the emission time of the message is comprised in the message and the arrival time is measured by the first device with reference to the time reference obtained from the first broadcast communication network;

determining the validity of the received message, the message being determined valid in case the group identifier comprised in the message is the same as the group identifier of the first device and in case said transmission delay is lower than a threshold; and

authorizing the access to the service in case the received message is valid.

2. The method according to claim 1 further comprising additional access constraints based on a counter, wherein access to the service is authorized only when the counter is greater than zero, said counter being incremented in case the received message is valid and decremented at determined time intervals.

3. The method according to claim 1 further comprising:

extracting from the received message a value reflecting the number of retransmissions allowed; and

when the value reflecting the number of retransmissions allowed is greater than zero;

build a new message wherein the emission time is updated and the value reflecting the number of retransmissions is decremented; and

transmit the new message on the second broadcast communication network.

4. The method according to claim 1, wherein the second broadcast communication is wireless and configured to have limited coverage.

5. The method according to claim 1, wherein the time reference is an absolute time reference.

6. The method according to claim 1 wherein the time reference is a relative time reference.

7. The method according to claim 1 wherein the service to be authorized is one of access to a television channel, access to a personal image, access to a personal video and access to a device setup.

8. Computer program comprising program code instructions executable by a processor for implementing the steps of a method according to claim 1.

9. Computer program product which is stored on a non-transitory computer readable medium and comprises program code instructions executable by a processor for implementing the steps of a method according to claim 1.

10. A device for controlling access to a service on a first device, comprising:

an interface to a first broadcast communication network configured to obtain a time reference through the first broadcast communication network;

an interface to a second broadcast communication network configured to obtain a message from a second device through the second broadcast communication network, wherein the message comprises at least a group identifier common to a set of devices for which the service is authorized and an emission time of the message on the second broadcast communication network, where the emission time is given with reference to the time reference obtained from the first broadcast communication network;

memory configured to store at least a group identifier common to the set of devices for which the service is authorized and a value indicating if the device is a first or second device; and

a processor configured to;

determine a transmission delay between the emission time of the message and an arrival time of the message, wherein the emission time of the message is comprised in the message and the arrival time is measured by the first device with reference to the time reference obtained from the first broadcast communication network;

determine the validity of the received message, the message being determined valid in case the group identifier comprised in the message is the same as the group identifier of the first device and in case said transmission delay is lower than a threshold; and

authorize the access to the service when the received message is valid.

11. The device according to claim 10 further comprising additional access constraints based on a counter, wherein the access to the service is only authorized when the counter is greater than zero, said counter being incremented in case the received message is valid and decremented at determined time intervals.

12. The device according to claim 10 wherein the interface to the first broadcast communication network is one of a satellite broadcast interface, a terrestrial broadcast interface, a cable network interface and a broadband network.

13. The device according to claim 10 wherein the interface to the second broadcast communication network is using one of WiFi, ZigBee and Bluetooth technologies.

14. The device according to claim 10 wherein the service to be authorized is one of access to a television channel, access to a personal image, access to a personal video and access to a device setup.