IPTV FOLLOW ME CONTENT SYSTEM AND METHOD

• US 20090252329A1
• Filed: 04/02/2008
• Published: 10/08/2009
• Est. Priority Date: 04/02/2008
• Status: Active Grant

• Current Assignee: TiVo Corporation (Adeia Inc.)
• Original Assignee: Qwest Communications International Incorporated (Lumen Technologies, Inc.)
• Inventors: Khan, Waqar, Casey, Steven M., Castro, Felipe, Selvadurai, Gnanasegeran
• Granted Patent: US 8,238,559 B2
• Time in Patent Office: Days
• US Class Current: 380/279
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4325 by playing back content from the storage medium reproduction of recorded television signals H04N5/76; reproduction of recorded television signals H04N9/79
• CPC Class Codes: H04N 21/441 Acquiring end-user identification , e.g. using personal code sent by the remote control or by inserting a card
• CPC Class Codes: H04N 21/4415 using biometric characteristics of the user, e.g. by voice recognition or fingerprint scanning cryptography using biological data H04L9/3231; authentication in networks using biometric H04L63/0861
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/472 End-user interface for requesting content, additional data or services; End-user interface for interacting with content, e.g. for content reservation or setting reminders, for requesting event notification, for manipulating displayed content end-user interfaces for retrieving video data from a database G06F16/739; network services for supporting unicast streaming H04L65/612
• CPC Class Codes: H04N 21/4753 for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6334 for authorisation, e.g. by transmitting a key wireless communications network key management H04W12/04; wireless communications network access security H04W12/08
• CPC Class Codes: H04N 21/64322 IP

Abstract

Tools are provided for distributing access-restricted content in an internet protocol television (“IPTV”) environment based on portable entitlement keys. Such tools can include a decoder, an encoder, and a network entitlement handler. The decoder may be configured to receive a key associated with entitlement information, and transmit the entitlement information over a network. The encoder may be configured to receive content from content providers, and to encode the content to create IP-compatible content, with access restrictions based on entitlement. The network entitlement handler may be configured to receive a request for requested content from the decoder; receive the access-restricted content including (including the requested content) from the encoder; and transmit the requested content over the network to the decoder using IP, when the decoder is entitled to receive the requested content.

Claims

1. A system for distributing access-restricted content in an internet protocol-based television environment, the system comprising:

a decoder unit, in operative communication with a network and locatable in the network by a network address, and configured to;

receive a key from a key store configured to store the key, the key being associated with a set of access rights for an account; and

transmit, over the network, entitlement information relating to the set of access rights;

an encoder unit, configured to;

receive content from a plurality of content providers;

encode at least a portion of the content to create access-restricted content, the access-restricted content and having limited accessibility based at least in part on the set of access rights; and

transmit at least a portion of the access-restricted content over the network using the internet protocol; and

a network entitlement handler unit, in operative communication with the encoder unit and the network, and configured to;

receive, over the network from the decoder unit, a request for a requested content set;

receive, from the encoder unit, at least a portion of the access-restricted content, the portion of access-restricted content comprising at least a portion of the requested content set;

receive the network address corresponding to the requesting decoder unit; and

transmit a transmitted portion of the requested content set over the network to the network address using a transmission scheme, the transmission scheme comprising the internet protocol.

2. The system of claim 1, further comprising a plurality of portable entitlement keys, each entitlement key comprising:

the key store;

a key provider unit, in operative communication with the key store, and configured to provide the key associated with the key store to the decoder unit; and

a portable chassis, operatively coupled with the key store and the key provider unit.

3. The system of claim 2, wherein the portable chassis encloses at least one of the key store or the key provider unit.

4. The system of claim 2, wherein the key provider unit is further configured to:

be compatible with a plurality of decoder units; and

provide the key to the plurality of decoder units.

5. The system of claim 2, wherein the decoder unit comprises a port, the port being configured to:

provide an electromagnetic interface for at least a portion of the portable chassis such that the decoder unit may receive the key from the key provider unit through the port.

6. The system of claim 2, wherein the decoder unit comprises a port, the port being configured to:

provide an electromagnetic interface for at least a portion of the portable chassis such that the decoder unit may receive the key from the key provider unit through the port; and

provide a physical interface for at least a portion of the portable chassis such that at least a portion of the portable chassis may be removably coupled to the decoder unit at the port.

7. The system of claim 1, wherein:

the decoder unit is further configured to receive a requesting key from the key store associated with a requesting account; and

the network entitlement handler unit is further configured to;

receive the entitlement information relating to the set of access rights associated with the requesting account;

determine, based at least in part on the entitlement information, whether the requesting account has an entitlement to receive the requested content set; and

transmit the transmitted portion of the requested content set only if the requesting account has the entitlement to receive the requested content set.

8. The system of claim 2, wherein:

the decoder unit comprises a port configured to;

removably couple the portable chassis with the decoder unit; and

receive a requesting key from the key provider unit; and

the network entitlement handler unit is further configured to;

receive the entitlement information relating to the set of access rights associated with the requesting account;

determine, based at least in part on the entitlement information, whether the requesting account has an entitlement to receive the requested content set; and

transmit the transmitted portion of the requested content set only if the requesting account has the entitlement to receive the requested content set,

wherein at least a portion of the entitlement information relates to whether the portable chassis is coupled with the decoder unit at the port.

9. The system of claim 1, wherein:

the set of access rights is further associated with at least one user, the at least one user having authority to use the account;

the decoder unit is further configured to receive a first key from the key store associated with a requesting account; and

the network entitlement handler unit is further configured to receive a second key, operable to verify the authority to use the account.

10. The system of claim 9, wherein the network entitlement handler unit is further configured to receive the second key from the decoder unit.

11. The system of claim 1, wherein the requested content set comprises configuration information, at least a portion of the configuration information being uniquely associated with the account.

12. The system of claim 1, further comprising a content store, comprising stored content uniquely associated with the account,

wherein the requested content set comprises at least a portion of the stored content.

13. The system of claim 1, further comprising an encrypter unit, in operative communication with the network entitlement handler unit, and configured to encrypt at least a portion of the requested content set before transmitting the transmitted portion of the requested content set over the network.

14. The system of claim 1, further comprising a network tester unit, in operative communication with the network and the network entitlement handler unit, and further configured to:

determine a set of characteristics relating to the network before transmitting the transmitted portion of the requested content set over the network; and

alter the transmitted portion of the requested content set based at least in part on the determination of the set of characteristics.

15. The system of claim 14, wherein:

determining the set of characteristics relating to the network comprises determining the throughput of the network; and

altering the transmitted portion of the requested content set comprises;

determining a compatible portion of the requested content set which can be effectively transmitted over the network based at least in part on the determination of the throughput of the network; and

transmitting only the compatible portion of the requested content set over the network.

16. The system of claim 14, wherein:

determining the set of characteristics relating to the network comprises determining that at least a portion of the requested content set comprises incompatible content, the incompatible content being incompatible with least a portion of the set of characteristics; and

altering the transmitted portion of the requested content set comprises, before transmitting the transmitted portion of the requested content set over the network, altering at least the incompatible content to make the transmitted portion of the requested content set compatible with the set of characteristics.

17. The system of claim 14, wherein:

determining the set of characteristics relating to the network comprises determining a geographic location of the network address relating to the decoder unit; and

altering the transmitted portion of the requested content set comprises, before transmitting the requested content set over the network, altering at least a portion of the requested content set based at least in part on the geographic location of the network address relating to the decoder unit.

18. The system of claim 1, further comprising a network tester, in operative communication with the network and the network entitlement handler unit, and further configured to:

determine a set of characteristics relating to the network before transmitting the transmitted portion of the requested content set over the network; and

alter the transmission scheme based at least in part on the determination of the set of characteristics.

19. The system of claim 1, further comprising a computer readable medium, the computer readable medium comprising the decoder unit and being in operative communication with the key store, the key store being stored on a computer readable storage device.

20. A network entitlement handler apparatus for distributing access-restricted content in an internet protocol-based television environment, the apparatus comprising:

a request receiver unit, configured to receive from a network;

a network address, associated with a decoder unit in operative communication with the network;

entitlement information associated with a requesting key, the requesting key stored in a key store and associated with a set of access rights associated with an account; and

a request for a requested content set;

a content receiver unit, configured to receive access-restricted content from a content provider, the access-restricted content comprising at least a portion of the requested content set;

a determiner unit, configured to determine, based at least on the entitlement information, whether the account has an entitlement to receive the requested content set; and

a content transmitter unit, configured to transmit, only if the account has the entitlement to receive the requested content set, at least a portion of the requested content set over the network to the network address using the internet protocol.

21. A method for distributing access-restricted content in an internet protocol-based television environment, the method comprising:

receiving, over a network, entitlement information relating to a set of access rights associated with an account;

receiving a requested content set over the network from a requester;

receiving access-restricted content comprising the requested content set, the access-restricted content being compatible with the internet protocol and having limited accessibility based at least in part on the entitlement information;

determining, based at least in part on the entitlement information, whether the account has an entitlement to receive the requested content set; and

transmitting, based at least in part on the determining that the account has the entitlement to receive the requested content set, a transmitted portion of the requested content set over the network to the requester using a transmission scheme comprising the internet protocol.

22. The method of claim 21, further comprising:

receiving a requesting key at the requester from a portable key provider unit, wherein the requesting key is associated with the set of access rights associated with the account.

23. The method of claim 21, wherein:

the set of access rights is further associated with at least one user, the at least one user having authority to use the account; and

the method further comprises;

receiving a first key at the requester from a portable key provider unit, wherein the requesting key is associated with the set of access rights associated with the account; and

receiving, from the at least one user, a second key operable to verify the authority to use the account.

24. The method of claim 21, further comprising:

determining a set of characteristics relating to the network before the transmitting step; and

altering the transmitted portion of the requested content set based at least in part on the determining the set of characteristics relating to the network.

25. The method of claim 21, further comprising:

determining a set of characteristics relating to the network before the transmitting step; and

altering the transmission scheme based at least in part on the determining the set of characteristics relating to the network.

26. A portable entitlement key for use in an internet protocol-based television environment, the apparatus comprising:

a storage means for storing a key associated with a set of access rights for an account; and

a provision means for providing the key to at least two decoder means, each decoder means comprising;

a means for receiving the key;

a means for transmitting entitlement information relating to the set of access rights over a network; and

a means for receiving media content over the network, at least partially by using the internet protocol, wherein access to at least a portion of the media content is restricted at least in part in relation to the set of access rights.

27. The portable entitlement key of claim 26, further comprising:

a housing means for portably housing the storage means and the provision means.

28. The portable entitlement key of claim 27, wherein:

the housing means further comprises a means for interfacing with at least one of the decoder means.