Controlled Dissemination of Information in Mobile Networks

• US 20090310783A1
• Filed: 02/17/2009
• Published: 12/17/2009
• Est. Priority Date: 06/11/2008
• Status: Abandoned Application

• Current Assignee: NEC Laboratories America Inc (NEC Corporation)
• Original Assignee: NEC Laboratories America Inc (NEC Corporation)
• Inventors: Jiang, Guofei, Sundaresan, Karthikeyan, Kokku, Ravindranath
• Application Number:
  US12/371,976
• Publication Number:
  US 20090310783A1
• Time in Patent Office: Days
• US Class Current: 380/255
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]

Abstract

The present invention discloses systems and methods for controlled dissemination of information in mobile networks using encrypted broadcasts that are decrypted at the device. An encryption key is generated corresponding to a particular category or granularity of information. The information is encrypted before it is broadcast to the sector. A user within the sector sends a key request across the network, in response to which the encryption key is sent to the user. The user can decrypt the encrypted information received in the broadcast. Additionally, a credit-checking mechanism may be employed to ensure that the user has sufficient credit to purchase the key. In one embodiment, the information to be disseminated is divided into a plurality of categories, wherein each category corresponds to a granularity of information. The encryption key is one in a set of encryption keys, each of said set of encryption keys being assigned to a particular hierarchical level corresponding to a particular granularity of information.

Claims

1. ) A system for controlling dissemination of information to a device on a mobile network, the system comprising:

an information generation unit for generating information to be disseminated over the mobile network, wherein the information generation unit divides the information into a plurality of categories corresponding to a plurality of granularities of information;

a key generator for generating an encryption key to be transmitted to the information generation unit, said encryption key being one in a set of encryption keys, each encryption key of the set being assigned to a particular hierarchical level corresponding to a particular granularity of information;

an encryption unit in communication with the information generating unit and the key generator for encrypting the particular granularity of information using the corresponding encryption key; and

a broadcasting unit in communication with the information generation unit for broadcasting the encrypted information to the device across the mobile network

2. ) The system of claim 1, further comprising:

a transceiver on the device for transmitting a key request to the key generator and for retrieving a subset of the set of encryption keys from the key generator in response to the key request; and

a decryption unit on the device for decrypting the corresponding encrypted granularity of information received at the device.

3. ) The system of claim 2, wherein the key request and the encryption key are transmitted over a designated channel between the device and the mobile network.

4. ) The system of claim 1, wherein each encryption key is assigned a credit value based on the hierarchical level of the encryption key, the system further comprising a credit manager unit in communication with the key generator, said credit manager unit storing a first user account for a user of the device, wherein the key generator transmits a credit request to the credit manager unit to determine if the user has enough of a plurality of credits in said first user account to retrieve the requested subset of encryption keys.

5. ) The system of claim 4, further comprising:

a billing system in communication with the credit manager unit, wherein the credit manager unit refers to a second user account in the billing system to determine availability of the plurality of credits.

6. ) The system of claim 5, further comprising means for adding credits to the user account by purchasing the plurality of credits from an operator of the mobile network, an application service provider, or a third party service provider.

7. ) The system of claim 4, further comprising means for adding credits to the user account by purchasing the plurality of credits from a provider of the information to be transmitted.

8. ) The system of claim 1, further comprising:

one or more cellular base stations for serving a broadcast sector, said one or more cellular base stations transmitting broadcast sector information to the information generation unit.

9. ) The system of claim 8, wherein the information generation unit or the encryption unit divides the information to be disseminated into categories based on the received broadcast sector information, encrypts the information to be disseminated, and broadcasts the encrypted information to be disseminated to a plurality of devices in the broadcast sector.

10. ) The system of claim 1, wherein the information generation unit is one of a plurality of application servers, each application server from said plurality of application servers generating information to be disseminated, the system further comprising:

an information aggregator to receive from the plurality of application servers the information to be disseminated, divide the information into said plurality of information categories, and encrypt the plurality of categories of information.

11. ) The system of claim 1, wherein the key generator changes the encryption key at fixed intervals.

12. ) A method for controlling dissemination of information to a device on a mobile network, the method comprising:

dividing the information into a plurality of categories, each of said plurality of categories corresponding to a granularity of information;

generating a set of encryption keys, each of said encryption keys in the set being assigned to a particular hierarchical level among a plurality of hierarchical levels, said particular hierarchical level corresponding to a particular granularity of information;

encrypting each category of information within a granularity of information with one of the set of encryption keys in the corresponding hierarchical level; and

broadcasting the plurality of encrypted categories of information to the device on the mobile network.

13. ) The method of claim 12, further comprising:

transmitting, from the device, a key request to retrieve a subset of the set of encryption keys;

transmitting the requested subset of encryption keys to the device; and

using the requested subset of encryption keys to decrypt the corresponding category of information received at the device.

14. ) The method of claim 13, wherein the key request and the encryption key are transmitted over an individual channel between the device and the mobile network.

15. ) The method of claim 13, further comprising:

assigning a credit value to each encryption key within the set of encryption keys;

in response to the key request, determining if an account associated with the device has sufficient credit to acquire the requested subset of encryption keys; and

transmitting the requested subset of encryption keys to the device if there is sufficient credit in the account.

16. ) The method of claim 15, wherein the credit value of each encryption key is based on the particular hierarchical level of the encryption key.

17. ) The method of claim 15, wherein the credit in the account associated with the device corresponds to an amount of funds available in a user account associated with the device.

18. ) The method of claim 17, further comprising:

adding credits to the account associated with the device by submitting a request, wherein the user account is debited proportionate to the credits requested.

19. ) The method of claim 18, further comprising:

invoking a billing subsystem to determine if the user account has sufficient funds corresponding to the credit value of the requested set of encryption keys, before transmitting said requested set of encryption keys to the device.

20. ) The method of claim 12, further comprising:

generating, at a first server in communication with the mobile network, the information to be disseminated.

21. ) The method of claim 20, further comprising:

defining a broadcast sector on the mobile network, wherein the broadcast sector is serviced by one or more cellular base stations; and

transmitting sector information to the first server, wherein the information to be disseminated is divided into categories based on the received sector information.

22. ) The method of claim 21, further comprising:

broadcasting the plurality of encrypted categories of information to a plurality of devices within the broadcast sector.

23. ) The method of claim 21, wherein the first server is one of a plurality of application servers, each of said plurality of application servers generating information to be disseminated, the method further comprising:

transmitting the information to be disseminated to an information aggregator;

dividing, at the information aggregator, the information into said plurality of information categories based in part on the received sector information; and

broadcasting the encrypted plurality of categories of information to a plurality of devices within the broadcast sector.

24. ) The method of claim 12, further comprising:

changing the encryption key corresponding to the particular information granularity at fixed intervals.

25. ) The method of claim 24, further comprising:

requesting at said fixed intervals, from the device, the changed encryption key corresponding to the particular information granularity.

26. ) The method of clam 13, wherein the step of transmitting a key request further comprises:

initiating, via an application installed on the device, a request for a particular category of information; and

generating a request for an encryption key associated with the particular category of information.