Conditional access method and system for in broadcast transmissions

• US 20100153730A1
• Filed: 04/28/2005
• Published: 06/17/2010
• Est. Priority Date: 04/28/2005
• Status: Active Grant

• Current Assignee: Telecom Italia S.p.A.
• Original Assignee: Telecom Italia S.p.A.
• Inventors: Goria, Paolo
• Granted Patent: US 8,874,918 B2
• Time in Patent Office: Days
• US Class Current: 713/173
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/25833 involving client hardware characteristics, e.g. manufacturer, processing or storage capabilities allocation of resources considering hardware capabilities in multiprogramming arrangements G06F9/5044; allocation of resources considering software capabilities in multiprogramming arrangements G06F9/5055
• CPC Class Codes: H04N 21/4182 for identification purposes, e.g. storing user identification data, preferences, personal settings or data restricting access to computer systems by authenticating users using a predetermined code in combination with an additional device, e.g. dongle or smart card G06F21/123
• CPC Class Codes: H04N 21/42684 Client identification by a unique number or address, e.g. serial number, MAC address, socket ID network arrangements, protocols or services for addressing or naming H04L61/00
• CPC Class Codes: H04N 21/43853 involving multiplex stream decryption arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/6112 involving terrestrial transmission, e.g. DVB-T
• CPC Class Codes: H04N 21/6181 involving transmission via a mobile phone network arrangements for providing broadcast or conference services to substation in data switching networks in combination with wireless systems H04L12/189; wireless uplink channel access H04W74/004
• CPC Class Codes: H04N 21/6334 for authorisation, e.g. by transmitting a key wireless communications network key management H04W12/04; wireless communications network access security H04W12/08
• CPC Class Codes: H04N 21/6377 directed to server one-way streaming services wherein the source is controlled by the destination H04L65/613
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/17309 Transmission or handling of upstream communications

Abstract

A method for conditionally allowing fruition of broadcast contents, broadcast by a contents broadcaster (115) and received by a user by means of a receiving equipment (110), comprising: performing, locally at the receiving equipment of the user a first fruition entitlement check based on first fruition entitlement data available locally (225) at the receiving equipment; having the receiving equipment provide to the contents broadcaster the first fruition entitlement data exploiting a return communications channel (125) of the receiving equipment; having the contents broadcaster perform a second fruition entitlement check based on comparison between the received first fruition entitlement data and second fruition entitlement data available locally (320) to the contents broadcaster; conditioned on a result of the second check, having the contents broadcaster provide to the receiving equipment, exploiting the return communications channel, a fruition entitlement confirmation notification; at the receiving equipment, conditioning the fruition of the broadcast contents based on the receipt of the fruition entitlement confirmation by the contents broadcaster.

Claims

1. A method for conditionally allowing fruition of broadcast contents, broadcast by a contents broadcaster (115) and received by a user by means of a receiving equipment (110), comprising:

performing, locally at the receiving equipment of the user, a first fruition entitlement check based on first fruition entitlement data available locally (225) at the receiving equipment,

at the receiving equipment, conditioning the fruition of the broadcast contents based on a result of said first fruition entitlement check,

characterized by further comprising;

having the receiving equipment provide to the contents broadcaster second fruition entitlement data exploiting a return communications channel (125) of the receiving equipment;

having the contents broadcaster perform a second fruition entitlement check based on a comparison between the received second fruition entitlement data and third fruition entitlement data available locally (320) to the contents broadcaster;

conditioned on a result of the second check, having the contents broadcaster provide to the receiving equipment, exploiting the return communications channel, a fruition entitlement confirmation notification.

2. The method according to claim 1, in which at the receiving equipment, conditioning the fruition of the broadcast contents based on the receipt of the fruition entitlement confirmation by the contents broadcaster.

3. The method according to claim 2, in which said performing, locally at the receiving equipment of the user, a first fruition entitlement check based on first fruition entitlement data available locally at the receiving equipment, includes exploiting information provided to the user by the contents broadcaster upon subscription to the fruition of the broadcast contents.

4. The method according to claim 3, in which said second fruition entitlement data includes data stored on a smart card (225) provisioned to the user upon subscription and operatively associated with the receiving equipment.

5. The method according to claim 4, in which said second fruition entitlement data include an identifier (IDSC) of the smart card provisioned to the user upon subscription, fruition enabling data stored in the smart card, said fruition enabling providing an indication of the contents whose fruition is authorized, and an identifier of the receiving equipment (ID).

6. The method according to claim 5, in which said having the contents broadcaster perform a second fruition entitlement check based on a comparison between the received second fruition entitlement data and said third fruition entitlement data available locally to the contents broadcaster includes comparing the identifier code of the smart card provisioned to the user received from the receiving equipment, to a smart-card identifier code stored at the contents broadcaster.

7. The method according to claim 5 or 6, in which said having the contents broadcaster perform a second fruition entitlement check based on a comparison between the received second fruition entitlement data and said third fruition entitlement data available locally to the contents broadcaster includes comparing the identifier code of the receiving equipment received therefrom to at least one receiving-equipment identifier code stored at the contents broadcaster.

8. The method according to claim 5, 6 or 7, in which said having the contents broadcaster perform a second fruition entitlement check based on a comparison between the received second fruition entitlement data and said third fruition entitlement data available locally to the contents broadcaster includes comparing the fruition enabling data received from the receiving equipment to fruition-enabling data stored at the contents broadcaster.

9. The method according to any one of the preceding claims, in which said return channel includes a wireless communications channel, particularly a mobile telephony communications channel.

10. The method according to claim 9, in which said having the receiving equipment provide to the contents broadcaster the second fruition entitlement data, and having the contents broadcaster provide to the receiving equipment a fruition entitlement confirmation notification, includes having the receiving equipment send and, respectively, receive messages exploiting a messaging service of the mobile telephony network.

11. The method according to any one of the preceding claims, in which said return channel includes a wired communications channel, particularly a communications channel established through a Public Switched Telephone Network.

17. The receiving equipment according to any one of the preceding claims, in which said communicator module is adapted to establish the return communications channel exploiting a wired communications channel, particularly a Public Switched Telephone Network.

26. The contents broadcasting system according to any one of the claims 17 to 23, in which said return channel includes a wired communications channel, particularly a communications channel established through a Public Switched Telephone Network.

12. A receiving equipment for receiving contents broadcast by a contents broadcaster (115), comprising a conditional access system (220) adapted to conditionally allow fruition of the broadcast contents based on a first fruition entitlement check performed locally at the receiving equipment exploiting first fruition entitlement data available locally (225) at the receiving equipment, and

a communicator module (235) adapted to communications over a return communications channel (125),

characterized by further comprising:

a fruition authorization confirmation manager module (220b) cooperating with the communicator module and adapted to send fruition authorization confirmation requests (180) to a predetermined, remote authorization manager (135) exploiting the return communications channel, said fruition authorization confirmation requests including second fruition entitlement data, and to receive, over the return communications channel, of fruition entitlement confirmations (190) by the remote authorization manager.

13. The receiving equipment according to claim 12, in which said conditional access system is adapted to perform said first fruition entitlement check by cooperating with a smart card (225) provisioned to the user upon subscription and operatively associated with the receiving equipment.

14. The receiving equipment according to claim 13, in which said second fruition entitlement data include an identifier (IDSC) of the smart card provisioned to the user upon subscription, fruition enabling data stored in the smart card, said fruition enabling providing an indication of the contents whose fruition is authorized, and an identifier of the receiving equipment (ID).

15. The receiving equipment according to any one of the claims 12 to 14, in which said communicator module is adapted to establish the return communications channel exploiting a wireless communications network, particularly a mobile telephony network.

16. The receiving equipment according to claim 15, in which said communicator module is adapted to send the authorization confirmation requests and to receive the authorization confirmations exploiting a messaging service of the mobile telephony network.

18. A contents broadcasting system (115,135) for broadcasting contents over a broadcast channel, said contents being adapted to be conditionally accessible by a user exploiting a receiving equipment (110), said access to said contents being conditioned by a first fruition entitlement check based on first fruition entitlement data available locally (225) at the receiving equipment,

characterized by comprising

a fruition authorization verifier (135) adapted to communicate with the receiving equipment over a return communications channel (125) of the receiving equipment, said authorization verifier being further adapted to:

receive from the receiving equipment fruition authorization requests (180) including second contents fruition entitlement data available locally at the receiving equipment;

perform a second fruition entitlement check based on a comparison between the received second fruition entitlement data and third fruition entitlement data available locally (320) to the contents broadcaster; and

conditioned on a result of the second check, providing to the receiving equipment, exploiting the return communications channel, a fruition entitlement confirmation notification.

19. The contents broadcasting system according to claim 18, in which said first fruition entitlement data includes data stored on a smart card (225) provisioned to the user upon subscription and adapted to be operatively associated with the receiving equipment.

20. The contents broadcasting system according to claim 19, in which said second fruition entitlement data include an identifier (IDSC) of the smart card provisioned to the user upon subscription, fruition enabling data stored in the smart card, said fruition enabling providing an indication of the contents whose fruition is authorized, and an identifier of the receiving equipment (ID).

21. The contents broadcasting system according to claim 20, in which the fruition authorization verifier is adapted to perform said second check by comparing the identifier code of the smart card provisioned to the user and received from the receiving equipment, to a smart-card identifier code stored at the authorization verifier.

22. The contents broadcasting system according to claim 20 or 21, in which the fruition authorization verifier is adapted to perform said second check by comparing the identifier code of the receiving equipment received therefrom to at least one receiving-equipment identifier code stored at the authorization verifier.

23. The contents broadcasting system according to claim 20, 21 or 22, in which the fruition authorization verifier is adapted to perform said second check by comparing the fruition enabling data received from the receiving equipment to fruition-enabling data stored at the contents broadcaster.

24. The contents broadcasting system according to any one of the claims 18 to 23, in which said return channel includes a wireless communications channel, particularly a mobile telephony communications channel.

25. The contents broadcasting system according to claim 24, in which said fruition authorization verifier is adapted to communicate with the receiving equipment exploiting a messaging service of the mobile telephony network.