Method and System for Restricted Service Access

• US 20090313479A1
• Filed: 12/08/2005
• Published: 12/17/2009
• Est. Priority Date: 12/30/2004
• Status: Active Grant

• Current Assignee: Koninklijke KPN NV
• Original Assignee: Koninklijke KPN NV
• Inventors: Schröter, Andreas
• Granted Patent: US 8,417,953 B2
• Time in Patent Office: Days
• US Class Current: 713/185
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

A method and system for restricted service access is described. To access adult content, the user has to enter an administrator personal identification number into a mobile device. Upon receipt of the administrator personal identification number, an access code is generated, which is provided to a content provider. The content provider can calculate a valid time window and/or request an acknowledge message from a central server. If the current usage is within the valid time window or otherwise verified, access to the content is allowed. Thus, children are prevented from accessing adult content, while adult access is permitted.

Claims

1. A system to ensure a closed user group for content offers and services, comprising a Smart Card having two protection levels, wherein a first protection level controls normal usage and a second protection level controls administration of individual data, wherein a personal identification number (PIN) of the second protection level is used to access a microcontroller based calculation algorithm, and wherein the algorithm calculates and displays a key, which can be validated at another location with the same or an inverse algorithm.

2. The system of claim 1, wherein the Smart Card is used in a terminal and a user interface is handled by the terminal.

3. The system of claim 2, wherein the Smart Card in the terminal is also used for identification of a contract partner within a telecommunication network.

4. The system of claim 1, wherein the first and second protection levels are linked to access codes PIN1 and PIN2 of a subscriber identification module (SIM) card respectively.

5. The system of claim 1, wherein the calculation of the key is ciphered and time based, and wherein the validation is also time based.

6. The system of claim 1, wherein the calculation of the key is ciphered, personalized, and based on protected individual data on the Smart Card and the validation at another location is based on the same individual data.

7. The system of claim 6, wherein the personalization can be switched on and off by a user.

8. The system of claim 6, wherein the personalization can be switched on and off by sending a message to the Smart Card.

9. The system of claim 1, wherein the algorithm for the key calculation can be parameterized by a message sent to the Smart Card.

10. The system of claim 1, wherein a message is sent when the key is generated, and wherein it is possible to charge that message.

11. The system of claim 1, wherein the validation is a prerequisite for access to content.

12. The system of claim 1, wherein random numbers are generated for screening instead of a valid key, if the personal identification number of the second protection level is not used.

13. The system of claim 1, wherein the validation is media independent and independent of a particular communication network.

14. The system of claim 1, wherein the validation is done within parts of the telecommunication network and is offered to third parties as a service.