Method for Single Sign-On When Using a Set-Top Box

• US 20100023962A1
• Filed: 09/06/2007
• Published: 01/28/2010
• Est. Priority Date: 09/26/2006
• Status: Active Grant

• Current Assignee: Beijing Xiaomi Mobile Software Co., Ltd. (Xiaomi Corp.)
• Original Assignee: Nokia Solutions and Networks GmbH & Co. KG (Nokia Corporation)
• Inventors: Guan, Qi, Blommaert, Marc
• Granted Patent: US 8,756,624 B2
• Time in Patent Office: Days
• US Class Current: 725/31
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 7/165 Centralised control of user terminal subsequent to an upstream request signal H04N7/17345; Registering at central by two-way working H04N7/17309
• CPC Class Codes: H04N 7/17309 Transmission or handling of upstream communications

Abstract

When the set-top box (STB) has been switched on, registration and authentication with the provider (IDP) are carried out (1, 2, 3). Following successful authentication, a piece of authentication information is then sent (4) to the set-top box (STB), which the set-top box (STB) sends (5) to a service provider (SP1) for registration. The service provider (SP1) then sets up (6) a connection to the provider (IDP) of the registration and authentication function in order to verify the authentication information and to request guidelines for charging, and the provider (IDP) of the registration and authentication function sends (7) confirmation to the service provider.

Claims

1-8. -8. (canceled)

9. A method comprising:

via a predetermined provider machine communicatively coupled to a communications network, registering and authenticating a set-top box with each of a plurality of service providers according to an agreement between each of said plurality of service providers and said provider, said set-top box adapted to implement a plurality of applications provided by said plurality of service providers, said registering and authenticating comprising;

receiving first authentication information from the set-top box;

sending second authentication information to said set top box, wherein, responsive to receiving said second authentication information, said set top box is adapted to register itself with each of said plurality of service providers by transmitting said second authentication information to each of said plurality of service providers

receiving said authentication information and a request for guidelines for charging via a connection set up by each of said plurality of service providers;

verifying said authentication information received via said connection from each of said plurality of service providers;

sending guidelines for charging to each of said plurality of service providers; and

sending a confirmation to each of said plurality of service providers.

10. The method of claim 9, wherein:

said set top box is adapted to transmit a configuration file to each of said plurality of service providers.

11. The method of claim 9, further comprising:

authorizing a user of said set-top box and transmitting authorizations of said user of said set top box to at least one of said plurality of service providers.

12. The method of claim 9, wherein:

said set top box is adapted to receive digital rights management encryption information from one of said plurality of service providers.

13. The method of claim 9, wherein:

each of said plurality of service providers is adapted to send digital rights management encryption information to said set-top box.

14. The method of claim 9, wherein:

said registration uses Liberty Alliance Protocols (LAP).

15. The method of claim 9, further comprising:

causing at least one of said plurality of service providers to send public-key infrastructure information for digital rights management to said set-top box.

16. The method of claim 9, wherein:

at least one of said plurality of applications is encrypted using symmetric encryption.

17. The method of claim 9, further comprising:

causing at least one of said plurality of service providers to send public-key infrastructure information for digital rights management to said set-top box, said public-key infrastructure information validated and issued by a Verimatrix Content Authority System.

18. The method of claim 9, wherein:

a public key infrastructure is used for sending encryption information.

19. The method of claim 9, further comprising:

causing at least one of said plurality of service providers to use public-key infrastructure for sending encryption information for a digital rights management to said set-top box.