Apparatus and methods for rights-managed content and data delivery

• US 10,339,281 B2
• Filed: 11/13/2017
• Issued: 07/02/2019
• Est. Priority Date: 03/02/2010
• Status: Active Grant

• Current Assignee: Time Warner Cable Enterprises LLC (Charter Communications Incorporated)
• Original Assignee: Time Warner Cable Enterprises LLC (Charter Communications Incorporated)
• Inventors: Cholas, Chris, Markley, Jeffrey P., Patel, Vipul, Marsh, Christopher
• Primary Examiner(s): Zhao, Don G
• Application Number:
  US15/811,216
• Publication Number:
  US 20180144106A1
• Time in Patent Office: 596 Days
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 30/0633 Lists, e.g. purchase orders, compilation or processing
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

Methods and apparatus for providing access to content across a plurality of devices and environments. In one embodiment, a downloadable rights profile is utilized in order for a user device to determine whether to provide content to a subscriber. The user device is first registered to content delivery the network; the device then requests a rights profile indicating the rights of the subscriber associated with the device to access content. The rights profile is transmitted to the device. The rights profile may be configured to be valid only for a pre-determined time, thus enabling a subscriber'"'"'s rights to be updated (including revoked). Security mechanisms may also be utilized to ensure access to content is limited only to authorized subscribers. In another embodiment, a user-based authentication procedure is utilized, thereby making the rights determination and content provision process completely agnostic to the underlying hardware.

Claims

1. A computerized method for providing digitally rendered content to a computerized client device in a content delivery network, the computerized method comprising:

receiving, from a rights management application computer program operating on a computerized client device, data representative of a request for a rights profile, the data representative of the request comprising identification information, the identification information identifying a user associated with the computerized client device;

based at least on a portion of the identification information, causing an association of the computerized client device to a subscriber account of the user associated with the computerized client device via association data;

based at least on the association data, receiving rights data relating to rights of the user to access the digitally rendered content;

utilizing the rights data to generate rights profile data; and

transmitting the rights profile data to the rights management application computer program, the rights profile data enabling the rights management application computer program to authorize rendering digitally rendered content via a media player application computer program configured to operate on the computerized client device or another computerized device associated with the user.

2. The computerized method of claim 1, further comprising:

based on the association data, causing download of an device-agnostic version of the media player application specific to the computerized client device or the another computerized device associated with the user such that only the agnostic version of the media player application computer program can decode the digitally rendered content.

3. The computerized method of claim 1, wherein the rights profile data comprises data indicative of an expiration time, and the computerized method further comprises causing disablement, upon proximity of the expiration time, of one or more trick mode functions with respect to playback of the digitally rendered content.

4. The computerized method of claim 1, further comprising causing download of a seed for decoding, by the media player application computer program, of the digitally rendered content;

wherein the media player application computer program is configured to input the seed to a cryptographic hashing algorithm, and the cryptographic hashing algorithm is configured to output a unique hash for use in the decoding of the digitally rendered content.

5. The computerized method of claim 1, further comprising:

providing data representative of a list of recommended content for display on the computerized device, the list of recommended content generated based at least in part on the association data and at least a portion of the identification information.

6. Computer readable apparatus comprising a non-transitory storage medium, the non-transitory medium comprising at least one computer program having a plurality of instructions, the plurality of instructions configured to, when executed on a processing apparatus:

send data representative of a request for data relating to rights of a user to access digitally rendered content;

receive the data relating to the rights of the user to access the digitally rendered content;

based on an absence of information relating to one or more capabilities of a computerized client device from the data relating to the rights, execute a computerized discovery protocol to determine the one or more data processing or rendering capabilities of the computerized client device;

cause download of a media player application computer program, the media player application computer program configured to determine, based at least in part on the data relating to the rights, whether the user is given a right to access the digitally rendered content;

receiving the digitally rendered content for storage at a data storage location accessible to the computerized client device, the digitally rendered content received from a computerized content source of the content delivery network;

receive, via the media player application computer program, access to the digitally rendered content at the storage location; and

render, via the media player application computer program, the digitally rendered content in a format that is in accordance with the one or more processing or rendering capabilities of the computerized client device.

7. The computer readable apparatus of claim 6, wherein the plurality of instructions are further configured to, when executed on a processing apparatus:

receive data relating to one or more credentials associated with a user account of the user;

transmit the data relating to the one or more credentials to an computerized authorization process for verification thereof; and

based at least on successful verification of the one or more credentials by the computerized authorization process, receive a downloadable security software module for the computerized client device, the downloadable software security module configured to enable the receipt of the data relating to the rights of the user, the data relating to the rights of the user being associated with the user account.

8. The computer readable apparatus of claim 7, wherein verification comprises access, by the computerized authorization process, of an authentication database to determine whether the computerized client device is on an authorized list of devices, the access based at least in part on device-specific data associated with the computerized client device.

9. A computerized client device for use in a content delivery network, comprising:

processor apparatus; and

storage apparatus in data communication with the processor apparatus, the storage apparatus comprising at least one computer program configured to, when executed on the processor apparatus;

send data representative of a request for digitally rendered content;

download a media player application computer program;

receive rights profile data via the media player application computer program;

execute a computerized discovery protocol to determine one or more indigenous decoding or playback capabilities of the computerized client device;

determine, based at least in part on the rights profile data, whether a user of the computerized client device is given a right to access the requested digitally rendered content; and

receive, via the media player application computer program, access to the requested digitally rendered content formatted according to the decoding or playback capabilities of the computerized client device.

10. The computerized client device of claim 9, wherein the at least one computer program is further configured to, when executed on the processor apparatus, cause the execution of the computerized discovery protocol based at least upon determination that the media player application computer program does not contain data sufficient to determine the indigenous decoding or playback capabilities of the computerized client device.

11. The computerized client device of claim 9, wherein the at least one computer program is further configured to, when executed on the processor apparatus:

determine, via the media player application computer program, whether a user of the computerized client device is authorized to receive the rights profile data; and

based on a determination that the user is authorized to receive the rights profile data, receive a version of the media player application computer program specific to the computerized client device such that the version of the media player application computer program can only be used by the computerized client device to decode the requested digitally rendered content.

12. The computerized client device of claim 9, wherein:

the media player application computer program is configured to display a user interface for input of username and password; and

the determination of whether the user is authorized is based at least on the username and password matching those stored in a subscriber database.

13. The computerized client device of claim 9, wherein the media player application computer program is configured to provide the user with an option to switch device bases for input to a recommendation engine.

14. The computerized client device of claim 9, wherein the at least one computer program is further configured to, when executed on the processor apparatus:

generate a user interface, the user interface configured to allow a user of the computerized client device to log into a network server apparatus so that at least portions of the rights profile data can be provided to the computerized client device.

15. The computerized client device of claim 9, wherein the rights profile data further comprises data regarding at least one of:

a number of times a user of the computerized client device can have the digitally rendered content outputted to a display device of the computerized client device;

one or more types of the digitally rendered content the user can access; and

one or more content sources of the digitally rendered content the user can access.

16. The computerized client device of claim 9, wherein the at least one computer program is further configured to, when executed on the processor apparatus:

execute a common software image, the execution of the common software image configure to transmit data representative of a request a downloadable security module specific to the computerized client device.

17. The computerized client device of claim 16, wherein the common software image comprises a software interface to a secure download system, and wherein the data representative of the request comprises data representative of a secure request that is independent of other applications of the computerized client device.

18. The computerized client device of claim 16, wherein the downloadable security module comprises conditional access software configured specifically for the computerized client device.

19. The computerized client device of claim 9, wherein the at least one computer program is further configured to, when executed on the processor apparatus:

decode the requested digitally rendered content based only on information regarding rights a user of the computerized client device indicated by the rights profile data, the digitally rendered decoded content being accessible to the user from any device associated with the user after the decoding of the digitally rendered content.

20. The computerized client device of claim 19, wherein the media player application computer program is further configured to determine an association between the user and at least the computerized client device based on access of data related to an account of the user stored at a billing entity on the content delivery network.