SECURE INFORMATION DELIVERY

• US 20140115333A1
• Filed: 10/24/2012
• Published: 04/24/2014
• Est. Priority Date: 10/24/2012
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: KING, William C., LEE, Kwai Yeung
• Granted Patent: US 8,972,729 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/72 Subscriber identity

Abstract

A first network device is configured to receive a request for content from a user device, determine that the user device is not authenticated, and send information to the user device that the user device requires authentication. The first network device is configured further to receive a notification that the user device is authorized to receive content from multiple content providers. The first network device is configured further to generate a secret key and authenticate the user device by using the secret key. The first network device is further configured to send the content to the user device.

Claims

1. A method comprising:

receiving, by a first network device, a request for content from a user device;

determining, by the first network device, that the user device is not authenticated based on receiving the request for content from the user device;

sending, by the first network device, information to the user device that the user device requires authentication before the user device is authorized to receive the content from a plurality of content providers;

receiving, by the first network device, a notification from a second network device that the user device is authenticated based on the second network device determining that the user device is authorized to receive the content from the plurality of content providers;

generating, by the first network device, a secret key based on receiving the notification,

the secret key permitting the user device to receive the content from the plurality of content providers;

authenticating, by the first network device, the user device by using the secret key generated by the first network device; and

sending, by the first network device, the content from the plurality of content providers to the user device, based on authenticating the user device with the secret key.

2. The method of claim 1, where receiving the notification from the second network device includes:

receiving information that the user device is permitted to receive one particular type of content and the user device is not permitted to receive another type of content.

3. The method of claim 1, where generating the secret key includes:

generating the secret key based on a generic bootstrapping user security setting, a cipher key, and a service identifier.

4. The method of claim 1, where generating the secret key includes:

generating the secret key based on an international mobile subscriber identity, associated with the user device, a generic bootstrapping user security setting, and an application identifier associated with an application associated with one of the plurality of content providers.

5. The method of claim 1, where authenticating the user device by using the secret key generated by the first network device includes:

communicating with a universal integrated circuit card; and

authenticating the user device, based on communicating with the universal integrated circuit card, by using the secret key generated by the first network device.

6. The method of claim 1, further comprising:

receiving a second request for the content from a second user device, the second request being based on the second user device receiving a message from the user device that the user device is requesting the second user device to receive the content from a particular content provider of the plurality of content providers;

sending information to the second user device that the second user device requires authorization;

receiving a notification from the second network device that the second user device is authorized to receive the content from the particular content provider; and

sending, based on receiving the notification that the second user device is authorized, the content from the particular content provider to the second user device.

7. The method of claim 6, where the content sent from the particular content provider to the second user device is different than the content sent from the particular content provider to the user device.

8. A system comprising:

a first network device to;

receive a request for content from a user device;

determine that the user device is not authenticated based on receiving the request for content from the user device;

send information to the user device that the user device requires authentication before the user device is authorized to receive the content;

receive a notification from a second network device that the user device is authenticated based on the second network device determining that the user device is authorized to receive information from multiple content providers;

generate a secret key based on receiving the notification,

the secret key permitting the user device to receive the content from the multiple content providers;

authenticate the user device by using the secret key; and

send the content to the user device based on authenticating the user device with the secret key.

9. The system of claim 8, where, when receiving the notification from the second network device that the user device is authenticated, the first network device is to:

receive information regarding the type of content that the user device can receive from the multiple content providers.

10. The system of claim 9, where, when receiving the notification from the second network device, the first network device is to:

receive information that the user device is permitted to receive particular health-related information.

11. The system of claim 8, where, when receiving the notification from the second network device, the first network device is to:

receive information that the user device is permitted to receive content from a particular health-care provider.

12. The system of claim 8, the first network device is further to:

receive an update from the second network device, the update including updated content that can be sent to the user device from a particular content provider of the multiple content providers;

generate a second secret key based on receiving the update; and

send the updated content, using the second secret key, to the user device from the particular content provider.

13. The system of claim 8, the first network device is further to:

send additional information to the user device that the user device is allowed to receive different content from a different content provider.

14. The system of claim 8, the first network device is further to:

receive a second request for different content from a second user device, the second requested based on the second user device receiving a message from the user device that the user device is requesting the second user device to receive different content from a particular content provider;

send information to the second user device that the second user device requires authorization;

receive a notification from the second network device that the second user device is not authorized to receive the different content from the particular content provider; and

send a second notification to the second user device that the second user is not permitted to receive the different content.

15. The system of claim 8, where, when sending the content to the user device, the first network device is to:

send a notification to a content provider that the user device information is validated;

receive content from one of the multiple content providers based on receiving the notification; and

send the content to the user device based on receiving the content from the content provider.

16. A computer-readable medium comprising:

a plurality of instructions that, when executed by one or more processors of a first network device, cause the one or more processors to;

receive a request for content from a user device;

determine that the user device is not authenticated based on receiving the request for content from the user device;

send information to the user device that the user device requires authentication before the user device is authorized to receive the content from one or more of a plurality of content providers;

receive a notification from a second network device that the user device is authenticated based on the second network device determining that the user device is authorized to receive the content from the one or more of the plurality of content providers;

generate a secret key based on receiving the notification;

the secret key permitting the user device to receive the content from the plurality of content providers;

authenticate the user device by using the secret key generated by the first network device; and

send the content to the user device, based on authenticating the user device with the secret key, from the one or more of the plurality of content providers.

17. The computer-readable medium of claim 16, where one or more instructions, of the plurality of instructions, to determine that the user device is not authenticated include one or more instructions to:

determine that the user device does not have a valid secret key to receive content from the first network device.

18. The computer-readable medium of claim 16, where one or more instructions, of the plurality of instructions, to receive the notification from the second network device that the user device is authorized to receive the content include one or more instructions to:

receive information that the user device is permitted to receive healthcare-related information from a health-care related provider associated with one of the plurality of content providers.

19. The computer-readable medium of claim 16, where one or more instructions, of the plurality of instructions, to receive the notification from the second network device that the user device is authorized to receive the content include one or more instructions to:

receive information that the user device and a second user device is permitted to receive the same content from the one or more of the plurality of content providers.

20. The computer-readable medium of claim 16, where one or more instructions, of the plurality of instructions, to generate the secret key include one or more instructions to:

generate the secret key using a service identifier,

the service identifier including information regarding the content that the user device can receive from the one or more of the plurality of content providers.