Network node, module therefor and distribution method

• US 20060269058A1
• Filed: 05/10/2006
• Published: 11/30/2006
• Est. Priority Date: 05/25/2005
• Status: Abandoned Application

• Current Assignee: Alcatel SA (Nokia Corporation)
• Original Assignee: Alcatel SA (Nokia Corporation)
• Inventors: Domschitz, Peter, Tomsu, Marco, Kessler, Marcus, Oberle, Karsten
• Application Number:
  US11/430,892
• Publication Number:
  US 20060269058A1
• Time in Patent Office: Days
• US Class Current: 380/232
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

The invention relates to a network node (R2, D2), a module therefor and a distribution method. The network node comprises: receiving means (RB) for receiving a data stream (CDS) from a content source, in particular a content server (CS), of the network (NET), encryption means (EM) for individually encrypting said data stream to a subscriber data stream (SDS1, SDS2, SDS3), the encryption being specific to a subscriber terminal (T1, T2, T3) being coupled or able to be coupled with the network, and sending means (SM) for sending the subscriber data stream (SDS1, SDS2, SDS3) to the terminal.

Claims

1. Network node for a telecommunications network, the network node comprising:

receiving means for receiving a data stream from a content source, in particular a content server, of the network,

encryption means for individually encrypting said data stream to a subscriber data stream, the encryption being specific to a subscriber terminal being coupled or able to be coupled with the network, and

sending means for sending the subscriber data stream to the terminal.

2. Network node in accordance with claim 1 wherein the encryption means encrypt said subscriber data stream according to the standards of the Trusted Computing Platform Alliance and/or according to a Public Key Infrastructure.

3. Network node in accordance with claim 1 wherein the encryption means insert individual and/or generic watermarks into said subscriber data stream.

4. Network node in accordance with claim 1 wherein the encryption means are able to receive and preferably to request a respective encryption key from the subscriber terminal and/or from a key server.

5. Network node in accordance with claim 1 further comprising authenticating means for receiving and checking a respective authentication certificate from the subscriber terminal.

6. Network node in accordance with claim 1 wherein the encryption means comprise storage means for permanently storing an encryption key assigned to said subscriber terminal.

7. Network node in accordance with claim 1 wherein said receiving means comprise decryption means for decrypting said data stream, whereby said data stream is encrypted by said content source or another device of the telecommunications network.

8. Network node in accordance with claim 1 comprising multicast distribution means for distributing the data stream received from the content source as a first and at least one second subscriber data stream to a first and at least one second subscriber terminal, whereby the encryption means individually encrypt said first and at least one second subscriber data stream, the encryption being specific to the respective first and at least one second subscriber terminal.

9. Module for a network node of a telecommunications network, the module comprising program code executable by a processor of the network node, the module comprising:

a receiving function for receiving a data stream from a content source, in particular a content server, of the network,

an encryption function for individually encrypting said data stream to a subscriber data stream, the encryption being specific to a subscriber terminal being coupled or able to be coupled with the network, and

a sending function for sending the subscriber data stream to the terminal.

10. Distribution method for a telecommunications network, the method comprising the steps:

receiving a data stream from a content source, in particular a content server, of the network,

encrypting said data stream to a subscriber data stream, the encryption being specific to a subscriber terminal being coupled or able to be coupled with the network, and

sending the subscriber data stream to the terminal.