Method, apparatus and computer program product for providing mobile broadcast service protection

• US 20090202079A1
• Filed: 02/11/2008
• Published: 08/13/2009
• Est. Priority Date: 02/11/2008
• Status: Abandoned Application

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Karras, Timo, Alve, Jukka, Puputti, Matti
• Application Number:
  US12/029,205
• Publication Number:
  US 20090202079A1
• Time in Patent Office: Days
• US Class Current: 380/279
• CPC Class Codes: H04N 21/25833 involving client hardware characteristics, e.g. manufacturer, processing or storage capabilities allocation of resources considering hardware capabilities in multiprogramming arrangements G06F9/5044; allocation of resources considering software capabilities in multiprogramming arrangements G06F9/5055
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 7/165 Centralised control of user terminal subsequent to an upstream request signal H04N7/17345; Registering at central by two-way working H04N7/17309
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

An apparatus for providing mobile broadcast service protection may include a processor. The processor may be configured to receive an indication of device groupings defining at least a first group of devices and a second group of devices in which the first and second groups are defined on the basis of a device characteristic, communicate a first security key providing access to a first message stream associated with a mobile broadcast service to the first group of devices, and communicate a second security key providing access to a second message stream associated with the same mobile broadcast service to the second group of devices. Methods and computer program products corresponding to the apparatus are also provided from the perspective of a network device and mobile terminal.

Claims

1. A method comprising:

receiving an indication of device groupings defining at least a first group of devices and a second group of devices in which the first and second groups are defined on the basis of a device characteristic;

communicating a first security key providing access to a first message stream associated with a mobile broadcast service to the first group of devices; and

communicating a second security key providing access to a second message stream associated with the same mobile broadcast service to the second group of devices in which the first and second security keys are different.

2. A method according to claim 1, wherein receiving an indication of device groupings comprises receiving an indication of groupings defined on the basis of a device characteristic indicative of a device manufacturer.

3. A method according to claim 2, further comprising:

receiving an indication of a regrouping, the regrouping defining a third group of devices including at least one set of devices from a particular manufacturer in the first group and at least one set of devices from a different manufacturer in the second group and defining a fourth group including sets of devices not included in the third group;

communicating a third security key to the third group; and

communicating a fourth security key to the fourth group.

4. A method according to claim 3, further comprising:

determining a compromised one of the first and second security keys prior to defining the third and fourth groups; and

defining the third and fourth groups based on splitting sets of devices associated with respective manufacturers in the one of the first and second groups that includes the compromised security key between the third and fourth groups.

5. A method according to claim 2, further comprising storing information indicative of the device manufacturer of a plurality of devices in a database for use in grouping devices.

6. A method according to claim 2, further comprising providing information in a session description protocol file referred to by an electronic service guide to associate the first or second message stream with a corresponding rights object that is provided to a group of devices made by a particular group of manufacturers.

7. A method according to claim 2, wherein receiving an indication of device groupings occurs in response to detecting a security breach indicative of a compromised security key originating from a particular device manufacturer.

8. A method according to claim 1, wherein the first and second message streams carry encrypted keys, which, when decrypted with the first or second security key, respectively, provide access to the mobile broadcast service.

9. A computer program product comprising at least one computer-readable storage medium having computer-readable program code portions stored therein, the computer-readable program code portions comprising:

a first executable portion for receiving an indication of device groupings defining at least a first group of devices and a second group of devices in which the first and second groups are defined on the basis of a device characteristic;

a second executable portion for communicating a first security key providing access to a first message stream associated with a mobile broadcast service to the first group of devices; and

a third executable portion for communicating a second security key providing access to a second message stream associated with the same mobile broadcast service to the second group of devices in which the first and second security keys are different.

10. A computer program product according to claim 9, wherein the first executable portion includes instructions for receiving an indication of groupings defined on the basis of a device characteristic indicative of a device manufacturer.

11. A computer program product according to claim 10, further comprising:

a fourth executable portion for receiving an indication of a regrouping, the regrouping defining a third group of devices including at least one set of devices from a particular manufacturer in the first group and at least one set of devices from a different manufacturer in the second group and defining a fourth group including sets of devices not included in the third group;

a fifth executable portion for communicating a third security key to the third group; and

a sixth executable portion for communicating a fourth security key to the fourth group.

12. A computer program product according to claim 11, further comprising:

a seventh executable portion for determining a compromised one of the first and second security keys prior to defining the third and fourth groups; and

an eighth executable portion for defining the third and fourth groups based on splitting sets of devices associated with respective manufacturers in the one of the first and second groups that includes the compromised security key between the third and fourth groups.

13. A computer program product according to claim 10, further comprising a fourth executable portion for storing information indicative of the device manufacturer of a plurality of devices in a database for use in grouping devices.

14. A computer program product according to claim 10, further comprising a fourth executable portion for providing information in a session description protocol file referred to by an electronic service guide to associate the first or second message stream with a corresponding rights object that is provided to a group of devices made by a particular group of manufacturers.

15. A computer program product according to claim 10, wherein the first executable portion is executed in response to detecting a security breach indicative of a compromised security key originating from a particular device manufacturer.

16. A computer program product according to claim 9, wherein the first executable portion includes instructions for receiving the first and second message streams carrying encrypted keys, which, when decrypted with the first or second security key, respectively, provide access to the mobile broadcast service.

17. An apparatus comprising a processor configured to:

receive an indication of device groupings defining at least a first group of devices and a second group of devices in which the first and second groups are defined on the basis of a device characteristic;

communicate a first security key providing access to a first message stream associated with a mobile broadcast service to the first group of devices; and

communicate a second security key providing access to a second message stream associated with the same mobile broadcast service to the second group of devices in which the first and second security keys are different.

18. An apparatus according to claim 17, wherein the processor is configured to receiving an indication of device groupings by receiving an indication of groupings defined on the basis of a device characteristic indicative of a device manufacturer.

19. An apparatus according to claim 18, wherein the processor is further configured to:

receive an indication of a regrouping, the regrouping defining a third group of devices including at least one set of devices from a particular manufacturer in the first group and at least one set of devices from a different manufacturer in the second group and defining a fourth group including sets of devices not included in the third group;

communicate a third security key to the third group; and

communicate a fourth security key to the fourth group.

20. An apparatus according to claim 19, wherein the processor is further configured to:

determine a compromised one of the first and second security keys prior to defining the third and fourth groups; and

define the third and fourth groups based on splitting sets of devices associated with respective manufacturers in the one of the first and second groups that includes the compromised security key between the third and fourth groups.

21. An apparatus according to claim 18, wherein the processor is further configured to store information indicative of the device manufacturer of a plurality of devices in a database for use in grouping devices.

22. An apparatus according to claim 18, wherein the processor is further configured to provide information in a session description protocol file referred to by an electronic service guide to associate the first or second message stream with a corresponding rights object that is provided to a group of devices made by a particular group of manufacturers.

23. An apparatus according to claim 18, wherein the processor is further configured to receive an indication of device groupings in response to detection of a security breach indicative of a compromised security key originating from a particular device manufacturer.

24. An apparatus according to claim 17, wherein the processor is further configured to receive the first and second message streams carrying encrypted keys, which, when decrypted with the first or second security key, respectively, provide access to the mobile broadcast service.

25. An apparatus comprising a processor configured to:

receive a security key assigned to the apparatus based on a grouping of the apparatus within a group including at least one set of devices sharing a common device characteristic;

determine which one of at least two message streams corresponds to the received security key; and

utilize the security key to decrypt the one of the at least two message streams that corresponds to the security key.

26. An apparatus according to claim 25, wherein the device characteristic is indicative of a manufacturer of the device, and wherein determining which one of the at least two message streams corresponds to the received security key comprises attempting to use the security key to decrypt each message stream until the one of the at least two message streams that corresponds to the security key is determined.

27. An apparatus according to claim 25, wherein the device characteristic is indicative of a manufacturer of the device, and wherein determining which one of the at least two message streams corresponds to the received security key comprises receiving an indication of which one of the at least two message streams corresponds to the received security key from a portion of an electronic service guide.

28. A computer program product comprising at least one computer-readable storage medium having computer-readable program code portions stored therein, the computer-readable program code portions comprising:

a first executable portion for receiving a security key assigned to the apparatus based on a grouping of the apparatus within a group including at least one set of devices sharing a common device characteristic;

a second executable portion for determining which one of at least two message streams corresponds to the received security key; and

a third executable portion for utilizing the security key to decrypt the one of the at least two message streams that corresponds to the security key.

29. A computer program product according to claim 28, wherein the device characteristic is indicative of a manufacturer of the device, and wherein the second executable portion includes instructions for attempting to use the security key to decrypt each message stream until the one of the at least two message streams that corresponds to the security key is determined.

30. A computer program product according to claim 28, wherein the device characteristic is indicative of a manufacturer of the device, and wherein the second executable portion includes instructions for receiving an indication of which one of the at least two message streams corresponds to the received security key from a portion of an electronic service guide.

31. A method comprising:

receiving a security key assigned to the apparatus based on a grouping of the apparatus within a group including at least one set of devices sharing a common device characteristic;

determining which one of at least two message streams corresponds to the received security key; and

utilizing the security key to decrypt the one of the at least two message streams that corresponds to the security key.

32. A method according to claim 31, wherein the device characteristic is indicative of a manufacturer of the device, and wherein determining which one of the at least two message streams corresponds to the received security key comprises attempting to use the security key to decrypt each message stream until the one of the at least two message streams that corresponds to the security key is determined.

33. A method according to claim 31, wherein the device characteristic is indicative of a manufacturer of the device, and wherein determining which one of the at least two message streams corresponds to the received security key comprises receiving an indication of which one of the at least two message streams corresponds to the received security key from a portion of an electronic service guide.