System and Method for Managing Entitlements to Data Over a Network

• US 20100131973A1
• Filed: 08/06/2009
• Published: 05/27/2010
• Est. Priority Date: 11/24/2008
• Status: Active Grant

• Current Assignee: Time Warner Cable Enterprises LLC (Charter Communications Incorporated)
• Original Assignee: Time Warner Cable Enterprises LLC (Charter Communications Incorporated)
• Inventors: Putsch, Jon, Mayers, Matthew, Dillon, Michael, Stern, Peter
• Granted Patent: US 8,341,242 B2
• Time in Patent Office: Days
• US Class Current: 725/27
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/4108 characterised by an identification number or address, e.g. local network address protecting specific internal or external computer components using identification number G06F21/73; network arrangements, protocols or services for addressing or naming H04L61/00
• CPC Class Codes: H04N 21/4508 Management of client data or end-user data
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/6334 for authorisation, e.g. by transmitting a key wireless communications network key management H04W12/04; wireless communications network access security H04W12/08
• CPC Class Codes: H04N 21/64322 IP
• CPC Class Codes: H04N 21/6581 Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A system and method for determining entitlement to content residing on a server. A subscriber computing device operated by a subscriber generates a request for access to a requested content residing on a content access provider server. The subscriber has an account with a multi-channel video program distributor (MVPD) and the account comprises subscription information indicative of the services provided by the MVPD to the subscriber. The content request is received by the content access provider and forwarded to an entitlements server. The entitlement determines whether the subscriber is entitled to receive the requested content based on the subscription information and sends an access granted message to the content access provider server when the subscriber is entitled to receive the requested content.

Claims

1. A method for determining entitlement to content residing on a server comprising:

receiving a request from a subscriber computing device operated by a subscriber for access to a requested content residing on a content access provider server, wherein the subscriber has an account with a multi-channel video program distributor (MVPD) and the account comprises subscription information indicative of the services provided by the MVPD to the subscriber;

forwarding the content request from the content access provider server to an entitlements server;

receiving the content request at the entitlements server;

obtaining the subscription information;

determining at the entitlements server whether the subscriber is entitled to receive the requested content, wherein the determination of entitlement is based on the subscription information; and

sending an access granted message from the entitlements server to the content access provider server when the subscriber is entitled to receive the requested content.

2. The method of claim 1 further comprising granting access to the requested content to the subscriber computing device.

3. The method of claim 1, wherein the requested content is selected from the group consisting of video content, audio content, photographic content, text content, game content, and multi-media content.

4. The method of claim 1, wherein the subscriber computing device is selected from the group consisting of a desktop computer, a laptop computer, a mobile device, a PDA, and a cell phone.

5. The method of claim 1, wherein the content access server and the subscriber computing device communicate via a network.

6. The method of claim 5, wherein the network is selected from the group consisting of a wired network, a wireless network, a public switched network, a packet switched network, a hybrid-fiber coax network, a fiber network, and a satellite network.

7. The method of claim 1, wherein determining at the entitlements server whether the subscriber is entitled to receive the requested content comprises:

identifying from the subscription information one or more channels that the subscriber is entitled to receive from the MVPD; and

determining whether the entitlement to receive the one or more channels entitles the subscriber to access the requested content.

8. The method of claim 1, wherein the subscription information is selected from the group consisting of a list of subscribed channels, a service package descriptor indicative of a subscribed level of service, and a list of subscribed premium services.

9. The method of claim 1 further comprising:

forwarding a request from the content access provider server to an identity server to obtain authentication that the subscriber is the subscriber of the MVPD;

sending the content access provider server a response from the identity server denying the request for authentication when the subscriber is not the subscriber of the MVPD; and

sending the content access server a response from the identity server authenticating the subscriber when the subscriber is a subscriber of the MVPD.

10. The method of claim 9, wherein the response authenticating the subscriber comprises a subscriber identifier generated by the MVPD and wherein determining at the entitlements server whether the subscriber is entitled to receive the requested content comprises:

determining whether the subscriber identifier is associated with a subscriber account;

sending an access denied message from the entitlements server to the content access provider server when the subscriber identifier is not associated with the subscriber account; and

determining whether the subscriber is entitled to receive the requested content based on the subscription of the subscriber to receive services from the MVPD when the subscriber identifier is associated with the subscriber account.

11. The method of claim 1 further comprising:

generating an identifier associated with the subscriber;

associating the subscriber identifier with an account of the subscriber with a content access provider;

associating the subscriber identifier with the account of the subscriber with the MVPD;

authenticating the subscriber at the content access provider server using credentials accepted by the content access provider;

obtaining the subscriber identifier from the subscriber account with the content access provider; and

forwarding the content request from the content access provider server to an entitlements server, wherein the content request comprises the subscriber identifier, and

obtaining the subscription information using the subscriber identifier.

12. A system for determining entitlement to content residing on a server comprising:

a network;

a subscriber computing device operated by a subscriber and comprising a first processor, wherein the subscriber has an account with a multi-channel video program distributor (MVPD) and the account comprises subscription information indicative of the services provided by the MVPD to the subscriber

a content access provider server comprising a second processor;

a content datastore accessible to the content access provider server and having stored therein content;

an entitlements server comprising a third processor; and

an entitlements datastore accessible to the entitlements server and having stored therein the subscription data, wherein

the first processor is configured with software executable instructions to cause the subscriber computing device to perform operations comprising;

generating a content request message, wherein the content request message comprises a request for access to a requested content residing on the content datastore; and

communicating the content request message via the network to the content access provider server; and

the second processor is configured with software executable instructions to cause the content access provider server to perform operations comprising;

receiving the content request message; and

forwarding the content request via the network to an entitlements server;

the third processor is configured with software executable instructions to cause the entitlements server to perform operations comprising;

receiving the content request message;

accessing the entitlements datastore to obtain the subscription information;

determining from the subscription information whether the subscriber is entitled to receive the requested content; and

sending an access granted message via the network to the content access provider server when the subscriber is entitled to receive the requested content.

13. The system of claim 12, wherein the second processor is further configured with software executable instructions to cause the content access provider server to perform the operation of granting access to the requested content to the subscriber computing device.

14. The system of claim 12, wherein the requested content is selected from the group consisting of video content, audio content, photographic content, text content, game content, and multi-media content.

15. The system of claim 12, wherein the subscriber computing device is selected from the group consisting of a desktop computer, a laptop computer, a mobile device, a PDA, and a cell phone.

16. The system of claim 12, wherein the network is selected from the group consisting of a wired network, a wireless network, a public switched network, a packet switched network, a hybrid-fiber coax network, a fiber network, and a satellite network.

17. The system of claim 12, wherein determining from the subscription information whether the subscriber is entitled to receive the requested content comprises:

identifying from the subscription information one or more channels that the subscriber is entitled to receive from the MVPD; and

determining whether the entitlement to receive the one or more channels entitles the subscriber to access the requested content.

18. The system of claim 12, wherein the subscription information is selected from the group consisting of a list of subscribed channels, a service package descriptor indicative of a subscribed level of service, and a list of subscribed premium services.

19. The system of claim 12 further comprising an identity server having a fourth processor, wherein the second processor is further configured with software executable instructions to cause the content access provider server to perform operations comprising forwarding a request to the identity server to obtain authentication that the subscriber is the subscriber of the MVPD and wherein the fourth processor is configured with software executable instructions to cause the identity server to perform operations comprising:

sending the content access provider server a response denying the request for authentication when the subscriber is not the subscriber of the MVPD; and

sending the content access server a response authenticating the subscriber when the subscriber is a subscriber of the MVPD.

20. The system of claim 19, wherein the response authenticating the subscriber comprises a subscriber identifier generated by the MVPD, wherein determining from the subscription information whether the subscriber is entitled to receive the requested content comprises determining whether the subscriber identifier is associated with a subscriber account, and wherein the third processor is further configure with software executable instructions to cause the cause the entitlements server to perform operations comprising:

sending an access denied message from the entitlements server to the content access provider server when the subscriber identifier is not associated with the subscriber account; and

determining whether the subscriber is entitled to receive the requested content based on the subscription of the subscriber to receive services from the MVPD when the subscriber identifier is associated with the subscriber account.

21. The system of claim 12 further comprising an identity server having a fourth processor, wherein the fourth processor is configured with software executable instructions to cause the identity server to perform operations comprising generating an identifier associated with the subscriber and wherein the second processor is further configured with software executable instructions to cause the content access provider server to perform operations comprising:

associating the subscriber identifier with an account of the subscriber with a content access provider;

authenticating the subscriber at the content access provider server using credentials accepted by the content access provider;

obtaining the subscriber identifier from the subscriber account with the content access provider; and

forwarding the content request from the content access provider server to an entitlements server, wherein the content request comprises the subscriber identifier, and

wherein the third processor further comprises software executable instructions to cause the entitlements server to perform operations comprising;

associating the subscriber identifier with the account of the subscriber with the MVPD; and

obtaining the subscription information using the subscriber identifier.

22. A method for determining entitlement to content residing on a server comprising:

generating an identifier associated with a subscriber;

associating the subscriber identifier with an account of the subscriber with a content access provider;

associating the subscriber identifier with an account of the subscriber with a multi-channel video program distributor (MVPD), wherein the account comprises subscription information indicative of the services provided by the MVPD to the subscriber;

receiving a request from a subscriber computing device operated by the subscriber for access to a requested content residing on a content access provider server;

authenticating the subscriber at the content access provider server using credentials accepted by the content access provider;

obtaining the subscriber identifier from the subscriber account with the content access provider;

forwarding the content request from the content access provider server to an entitlements server, wherein the content request comprises the subscriber identifier;

obtaining the subscription information using the subscriber identifier;

determining at the entitlements server from the subscription information whether the subscriber is entitled to receive the requested content; and

sending an access granted message from the entitlements server to the content access provider server when the subscriber is entitled to receive the requested content.

23. The method of claim 22 further comprising granting access to the requested content to the subscriber computing device.

24. The method of claim 22, wherein the content is selected from the group consisting of video content, audio content, photographic content, text content, game content, and multi-media content.

25. The method of claim 22, wherein the subscriber computing device is selected from the group consisting of a desktop computer, a laptop computer, a mobile device, a PDA, and a cell phone.

26. The method of claim 22, wherein the content access server and the subscriber computing device communicate via a network.

27. The method of claim 26, wherein the network is selected from the group consisting of a wired network, a wireless network, a public switched network, a packet switched network, a hybrid-fiber coax network, a fiber network, and a satellite network.

28. The method of claim 22, wherein determining from the subscription information whether the subscriber is entitled to receive the requested content comprises:

identifying from the subscription information one or more channels that the subscriber is entitled to receive from the MVPD; and

determining whether the entitlement to receive the one or more channels entitles the subscriber to access the requested content.

29. The method of claim 22, wherein the subscription information is selected from the group consisting of a list of subscribed channels, a service package descriptor indicative of a subscribed level of service, and a list of subscribed premium services.

30. A system for determining entitlement to content residing on a server comprising:

a network;

a subscriber computing device operated by a subscriber and comprising a first processor, wherein the subscriber has an account with a multi-channel video program distributor (MVPD) and the account comprises subscription information indicative of the services provided by the MVPD to the subscriber

a content access provider server comprising a second processor;

a content datastore accessible to the content access provider server and having stored therein content;

an entitlements server comprising a third processor;

an entitlements datastore accessible to the entitlements server and having stored therein the subscription data; and

an identity server comprising a fourth processor, wherein the fourth processor is configured with software executable instructions to cause the identity server to perform operations comprising generating an identifier associated with the subscriber, wherein

the first processor is configured with software executable instructions to cause the subscriber computing device to perform operations comprising;

generating a content request message, wherein the content request message comprises a request for access to a requested content residing on the content datastore; and

communicating the content request message via the network to the content access provider server; and

the second processor is configured with software executable instructions to cause the content access provider server to perform operations comprising;

associating the subscriber identifier with an account of the subscriber with a content access provider;

receiving the content request message;

authenticating the subscriber at the content access provider server using credentials accepted by the content access provider;

obtaining the subscriber identifier from the subscriber account with the content access provider; and

forwarding the content request from the content access provider server to an entitlements server, wherein the content request comprises the subscriber identifier, and

the third processor is configured with software executable instructions to cause the entitlements server to perform operations comprising;

associating the subscriber identifier with the account of the subscriber with the MVPD;

receiving the content request message;

accessing the entitlements datastore to obtain the subscription information using the subscriber identity;

determining from the subscription information whether the subscriber is entitled to receive the requested content; and

sending an access granted message via the network to the content access provider server when the subscriber is entitled to receive the requested content.

31. The system of claim 30, wherein the third processor is further configured with software executable instructions to cause the content access provider server to perform the operation of granting access to the requested content to the subscriber computing device.

32. The system of claim 30, wherein the content is selected from the group consisting of video content, audio content, photographic content, text content, game content, and multi-media content.

33. The system of claim 30, wherein the subscriber computing device is selected from the group consisting of a desktop computer, a laptop computer, a mobile device, a PDA, and a cell phone.

34. The system of claim 30, wherein the network is selected from the group consisting of a wired network, a wireless network, a public switched network, a packet switched network, a hybrid-fiber coax network, a fiber network, and a satellite network.

35. The system of claim 30, wherein determining from the subscription information whether the subscriber is entitled to receive the requested content comprises:

identifying from the subscription information one or more channels that the subscriber is entitled to receive from the MVPD; and

determining whether the entitlement to receive the one or more channels entitles the subscriber to access the requested content.

36. The system of claim 30, wherein the subscription information is selected from the group consisting of a list of subscribed channels, a service package descriptor indicative of a subscribed level of service, and a list of subscribed premium services.