Network management in a media network environment

• US 20040117484A1
• Filed: 10/15/2003
• Published: 06/17/2004
• Est. Priority Date: 12/17/2002
• Status: Active Grant

• Current Assignee: Brian David Lakamp, Mitch Fredrick Singer
• Original Assignee: Brian David Lakamp, Mitch Fredrick Singer
• Inventors: Lakamp, Brian David, Singer, Mitch Fredrick
• Granted Patent: US 8,230,084 B2
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: G06F 21/1012 to domains
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 12/2805 Home Audio Video Interoperability [HAVI] networks
• CPC Class Codes: H04L 12/2812 describing content present in a home automation network, e.g. audio video content retrieval from the Internet G06F16/95
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 41/509 wherein the managed service relates to media content delivery, e.g. audio, video or TV
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04N 21/2343 involving reformatting operations of video signals for distribution or compliance with end-user requests or end-user device requirements video transcoding H04N19/40; media packet handling at the source H04L65/762
• CPC Class Codes: H04N 21/2543 Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/2585 Generation of a revocation list, e.g. of client devices involved in piracy acts
• CPC Class Codes: H04N 21/41422 located in transportation means, e.g. personal vehicle arrangements specially adapted for transportation systems in broadcast systems H04H20/62
• CPC Class Codes: H04N 21/4147 PVR [Personal Video Recorder] H04N5/76 takes precedence ; arrangements for broadcast with accumulation-type receivers H04H20/40
• CPC Class Codes: H04N 21/433 Content storage operation, e.g. storage operation in response to a pause request, caching operations
• CPC Class Codes: H04N 21/4331 Caching operations, e.g. of an advertisement for later insertion during playback
• CPC Class Codes: H04N 21/4334 Recording operations recording of a television signal H04N5/76; arrangements for recording or accumulating broadcast information or broadcast-related information H04H60/27
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/43622 : Interfacing an external recording device
• CPC Class Codes: H04N 21/43637 : involving a wireless protocol, e.g. Bluetooth, RF or wireless LAN [IEEE 802.11] arrangements for wireless networking or broadcasting of information in indoor or near-field type systems H04B10/114
• CPC Class Codes: H04N 21/4367 : Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4402 : involving reformatting operations of video signals for household redistribution, storage or real-time display details of conversion of video standards at pixel level H04N7/01; video transcoding H04N19/40; adapting incoming signals to the display format of the display terminal G09G5/005; media handling at the source in data packet switching networks H04L65/764
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/44231 : Monitoring of peripheral device or external card, e.g. to detect processing problems in a handheld device or the failure of an external recording device configuring of peripheral devices in general G06F9/4411; reporting information sensed by appliance or service execution status of appliance services in a home automation network H04L12/2823; monitoring the status of connected device in data switched networks H04L43/0817
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/63345 : by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/163 : by receiver means only

Abstract

Methods and apparatus for managing devices and content in a network environment. In one implementation, a method of adding a client as a member of a hub network includes: detecting a client connected to a server in a hub network; authenticating said client; authorizing said client; and adding said client as a member in said hub network.

Claims

1. A method of adding a client as a member of a hub network, comprising:

detecting a client connected to a server in a hub network;

authenticating said client;

authorizing said client; and

adding said client as a member in said hub network.

2. The method of claim 1, wherein:

said server will provide a license for content data bound to said hub network only to members of said hub network.

3. The method of claim 1, further comprising:

receiving an add request indicating said client.

4. The method of claim 3, wherein:

said add request is received from said client.

5. The method of claim 1, further comprising:

connecting said client to said server.

6. The method of claim 1, wherein:

detecting said client includes receiving a connection notification from said client.

7. The method of claim 1, wherein:

authenticating said client includes sending a compliance confirmation request to said client,

said compliance confirmation request requests information from said client to confirm that said client is a compliant device, and

a compliant device will not decrypt locked content data without a license that is bound to a hub network of which the compliant device is a member.

8. The method of claim 1, wherein:

authenticating said client includes sending an identification request to said client,

said identification request requests information from said client identifying said client.

9. The method of claim 1, wherein:

authorizing said client includes sending a local environment confirmation request to said client.

10. The method of claim 9, wherein:

said local environment confirmation request requests information from said client indicating whether said client in a local environment of said server, and

said local environment is a limited area defined relative to said server.

11. The method of claim 9, wherein:

authorizing said client includes measuring the time between sending said local environment confirmation request and receiving a reply from said client in response to said local environment confirmation request.

12. The method of claim 9, wherein:

sending said local environment confirmation request includes pinging said client.

13. The method of claim 1, further comprising:

checking a revocation list to determine whether said client is included in said revocation list;

wherein said revocation list is stored on said server.

14. The method of claim 1, further comprising:

confirming a device count of members in said hub network by comparing said device count with a member device limit;

wherein said client will not be added as a member in said hub network if said device count is greater than or equal to said member device limit.

15. The method of claim 14, further comprising:

increasing said device count after adding said client as a member.

16. The method of claim 1, further comprising:

comparing a device count of members in said hub network with a member device limit; and

confirming said device count by contacting an external device registration server.

17. The method of claim 16, further comprising:

sending a device add request to said device registration server; and

receiving a device add permission from said device registration server;

wherein said device add request includes said device count.

18. A method of adding a client as a member of a hub network, comprising:

sending a connection notification from a client to a server in a hub network;

sending identification information from said client to said server; and

receiving an add confirmation at said client from said server;

wherein said add confirmation indicates said client has been added as a member in said hub network.

19. The method of claim 18, wherein:

said server will provide a license for content data bound to said hub network only to members of said hub network.

20. The method of claim 18, further comprising:

sending an add request indicating said client from said client to said server.

21. The method of claim 18, further comprising:

connecting said client to said server.

22. The method of claim 18, further comprising:

sending compliance information from said client to said server;

wherein said compliance information indicates that said client is a compliant device, and

a compliant device will not decrypt locked content data without a license that is bound to a hub network of which the compliant device is a member.

23. The method of claim 18, further comprising:

sending authorization information from said client to said server;

wherein said authorization information indicates said client is in a local environment of said server, and

said local environment is a limited area defined relative to said server.

24. The method of claim 23, wherein:

said authorization information is a reply to a ping request from said server.

25. The method of claim 18, further comprising:

checking a revocation list to determine whether said client is included in said revocation list;

wherein said revocation list is stored on said client.

26. A method of adding a client as a member of a hub network, comprising:

authenticating a client through an intermediary device connected to a server in a hub network;

authorizing said client through said intermediary device; and

adding said client as a member in said hub network through said intermediary device;

wherein said client is not connected to said server.

27. The method of claim 26, wherein:

said server will provide a license for content data bound to said hub network only to members of said hub network.

28. The method of claim 26, wherein:

said client is not in a local environment of said server, and

said local environment is a limited area defined relative to said server.

29. A method of adding a client as a member of a hub network, comprising:

sending a connection notification from a client to a server in a hub network through an intermediary device connected to said server;

sending identification information from said client to said server through said intermediary device; and

receiving an add confirmation at said client from said server through said intermediary device;

wherein said add confirmation indicates said client has been added as a member in said hub network.

30. The method of claim 29, wherein:

said server will provide a license for content data bound to said hub network only to members of said hub network.

31. The method of claim 29, wherein:

said client is not in a local environment of said server, and

said local environment is a limited area defined relative to said server.

32. A method of removing a client as a member of a hub network, comprising:

triggering removal of a client as a member of a hub network;

disabling all licenses stored by said client corresponding to content data bound to said hub network; and

removing said client as a member in said hub network so that said client is no longer a member of said hub network.

33. The method of claim 32, wherein:

said server will provide a license for content data bound to said hub network only to members of said hub network.

34. The method of claim 32, wherein:

triggering removal of said client includes receiving a removal request from said client.

35. The method of claim 32, wherein:

triggering removal of said client includes receiving a revocation notification that said client is no longer to be authorized to be a member of a hub network.

36. The method of claim 35, further comprising:

adding said client to a revocation list stored on said server.

37. The method of claim 36, further comprising:

sending said revocation list including said client to a second client in said hub network.

38. The method of claim 36, further comprising:

sending said revocation list including said client to a second server in a second hub network.

39. The method of claim 35, further comprising:

adding said client to a revocation list corresponding to a root license stored on said server;

wherein said root license corresponds to locked content data stored on said server and is bound to said hub network.

40. The method of claim 32, wherein:

disabling said licenses includes sending a disable request to said client indicating one or more license to be disabled.

41. The method of claim 32, wherein:

disabling said licenses includes updating respective root licenses corresponding to said disabled licenses.

42. The method of claim 41, further comprising:

declining to renew said disabled licenses for said client.

43. The method of claim 32, wherein:

removing said client as a member includes updating respective root licenses corresponding to said disabled licenses.

44. The method of claim 32, wherein:

said server does not remove said client as a member until all of said disabled licenses have expired.

45. The method of claim 32, further comprising:

decreasing a device count after removing said client as a member;

wherein said device count indicates the number of members in said hub network.

46. A method of reconnecting a client to a hub network, comprising:

detecting a client connected to a hub network;

authenticating said client as a member of said hub network; and

authorizing said client.

47. The method of claim 46, further comprising:

refreshing one or more licenses stored on said client

48. The method of claim 46, wherein:

authenticating said client includes sending an identification request to said client,

said identification request requests information from said client identifying said client.

49. The method of claim 46, wherein:

authorizing said client includes sending a local environment confirmation request to said client, and

said local environment is a limited area defined relative to said server.

50. The method of claim 49, wherein:

authorizing said client includes measuring the time between sending said local environment confirmation request and receiving a reply from said client in response to said local environment confirmation request.

51. A method of disconnecting a client from a hub network, comprising:

disconnecting a client from a hub network;

setting an expiration time for a license stored on said client; and

comparing said expiration time to a clock of said client;

wherein said license corresponds to locked content data stored on said client and is bound to said hub network.

52. The method of claim 51, wherein:

said license indicates an expiration period, and

said expiration period indicates an amount of time for which said sub-copy license is valid.

53. The method of claim 51, further comprising:

setting said expiration time according to said expiration period including resetting said expiration time if said expiration time was previously set to a different value.

54. The method of claim 51, wherein:

disconnecting said client includes said client leaving a local environment of a server of said hub network, and

said local environment is a limited area defined relative to said server.

55. The method of claim 51, wherein:

said clock is a secure client clock.

56. The method of claim 51, further comprising:

when comparing said expiration time to said clock indicates that said expiration time has been reached, disabling said license;

wherein said client will not decrypt said locked content data when said license is disabled.

57. The method of claim 51, further comprising:

attempting to request a new license from a server in said hub network.

58. The method of claim 51, further comprising:

attempting to reconnect said client to said hub network.