System and methods for assignation and use of media content subscription service privileges

• US 20050160042A1
• Filed: 06/01/2004
• Published: 07/21/2005
• Est. Priority Date: 05/30/2003
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Privaris, Inc.
• Inventors: Johnson, Barry W., Olvera, Kristen R., Russell, David C.
• Granted Patent: US 7,783,892 B2
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06F 16/51 Indexing; Data structures therefor; Storage structures
• CPC Class Codes: G06F 18/22 Matching criteria, e.g. proximity measures
• CPC Class Codes: G06F 21/1076 Revocation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06V 40/13 Sensors therefor
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4415 using biometric characteristics of the user, e.g. by voice recognition or fingerprint scanning cryptography using biological data H04L9/3231; authentication in networks using biometric H04L63/0861

Abstract

This invention describes a system and methods for media content subscription service distribution; typical services include cable television, premium content channels, pay-per-view, XM radio, and online mp3 services. Subscribers use portable electronic devices to store digital certificates certifying the subscriber'"'"'s privileges and an assigned public key. The devices can communicate with specially enabled televisions, radios, computers, or other media presentation apparatuses. These, in turn, can communicate with central databases owned by the provider, for verification purposes. Methods of the invention describe media content subscription service privilege issuing and use. The invention additionally describes methods for protecting media content transmitted to users with a variety of encryption schemes. The invention also comprises methods for subscribed users to bestow a subset of their privileges to a number of secondary users, with appropriate permission from the media content subscription service provider.

Claims

1. A system for assigning and using media content subscription service privileges, comprising:

a. at least one personal identification device, capable of identifying its user and providing proof of user identification,

b. at least one media presentation apparatus, enabled for communicating with said at least one personal identification device and at least one remote media content subscription service database,

c. and at least one remote media content subscription service database.

2. The system of claim 1, wherein the personal identification device is a personal digital assistant.

3. The system of claim 1, wherein the personal identification device is a biometric personal identification device.

4. The system of claim 1, wherein the personal identification device is a laptop computer.

5. The system of claim 1, wherein the personal identification device is a handheld computer.

6. The system of claim 1, wherein the media presentation apparatus is further adapted for performing cryptographic functions.

7. The system of claim 1, wherein the media presentation apparatus is further adapted for sending and receiving data.

8. The system of claim 1, wherein the media presentation apparatus is a television.

9. The system of claim 1, wherein the media presentation apparatus is a radio.

10. The system of claim 1, wherein the media presentation apparatus is a stereo.

11. The system of claim 1, wherein the media presentation apparatus is a computer.

12. A method for assigning media content subscription service privileges to a primary applicant, comprising:

a. specifying a media content subscription service privilege for the primary applicant,

b. examining an assigned public key of the primary applicant in a media content subscription service database,

c. creating and storing a media content subscription service privilege certificate for the specified privilege in a personal identification device, the media content subscription service privilege certificate comprising at least;

i. an indicator of the media content subscription service privilege,

ii. the assigned public key, and

iii. a digital signature for the certificate, signed by the media content subscription service provider.

13. The method of claim 12, wherein the media content subscription service certificate further comprises a symmetric secret key used for encrypting and decrypting media content.

14. A method for accessing media content subscription service privileges on a personal identification device, comprising:

a. selecting a stored media content subscription service privilege certificate on the personal identification device,

b. authenticating a primary user to the personal identification device,

c. presenting the stored media content subscription service privilege certificate,

d. proving the primary user'"'"'s ownership of a public/private key pair stored in the media content subscription service privilege certificate,

e. verifying that the media content subscription service provider digitally signed the media content subscription service privilege certificate,

f. transmitting media content encrypted with a symmetric secret key to a media presentation apparatus,

g. decrypting the media content using the symmetric secret key, and

h. presenting the decrypted media content on the media presentation apparatus.

15. The method of claim 14, wherein the symmetric secret key is unique for all subscribed users, and is stored in the primary media content subscription service privilege certificate.

16. The method of claim 14, wherein the symmetric secret key is the same for all subscribed users, said key being securely transmitted to a user after verification that the media content subscription service provider signed the primary media content subscription service privilege certificate.

17. The method of claim 16, wherein the symmetric secret key is changed daily.

18. The method of claim 16, wherein the symmetric secret key is changed weekly.

19. The method of claim 16, wherein the symmetric secret key is changed monthly.

20. The method of claim 16, wherein the symmetric secret key is changed at random intervals.

21. A method for assigning a subset of a primary user'"'"'s media content subscription service privileges to a secondary applicant, comprising:

a. specifying a media content subscription service privilege for the secondary applicant,

b. verifying that the specified media content subscription service privilege is a subset of the privileges contained in the primary media content subscription service privilege certificate,

c. examining an assigned public key of the secondary applicant in a local database,

d. creating and storing a secondary media content subscription service privilege certificate for the specified privilege in a personal identification device, the secondary media content subscription service privilege certificate comprising at least;

i. the media content subscription service privilege,

ii. the secondary applicant'"'"'s assigned public key,

iii. a digital signature for the certificate, signed by the primary user, and

e. storing the primary media content subscription service privilege certificate in the personal identification device.

22. A method of accessing an assigned subset of a primary user'"'"'s media content subscription service privileges, comprising:

a. selecting a stored secondary media content subscription service privilege certificate on a personal identification device,

b. authenticating a secondary user to the personal identification device,

c. presenting the secondary media content subscription service privilege certificate,

d. proving ownership of the public/private key pair stored in the secondary media content subscription service privilege certificate,

e. verifying that the primary user digitally signed the secondary media content subscription service privilege certificate,

f. presenting the stored primary media content subscription service privilege certificate,

g. verifying that the media content subscription service provider digitally signed the primary media content subscription service privilege certificate,

h. transmitting media content encrypted with a symmetric secret key to a media presentation apparatus,

i. decrypting the media content using the symmetric secret key, and

j. presenting the decrypted media content on the media presentation apparatus.

23. The method of claim 22, wherein the symmetric secret key is unique for all subscribed users, and is stored in the primary media content subscription service privilege certificate.

24. The method of claim 22, wherein the symmetric secret key is the same for all subscribed users, said key being securely transmitted to a user after verification that the media content subscription service provider signed the certificate.

25. The method of claim 24, wherein the symmetric secret key is changed daily.

26. The method of claim 24, wherein the symmetric secret key is changed weekly.

27. The method of claim 24, wherein the symmetric secret key is changed monthly.

28. The method of claim 24, wherein the symmetric secret key is changed at random intervals.