APPARATUS AND METHODS FOR CONTENT DELIVERY AND MESSAGE EXCHANGE ACROSS MULTIPLE CONTENT DELIVERY NETWORKS

• US 20160088327A1
• Filed: 09/22/2015
• Published: 03/24/2016
• Est. Priority Date: 11/24/2008
• Status: Active Grant

• Current Assignee: Time Warner Cable Enterprises LLC (Charter Communications Incorporated)
• Original Assignee: Time Warner Cable Enterprises LLC (Charter Communications Incorporated)
• Inventors: Cronk, Gary, Putsch, Jonathan, Boutilier, James, Miller, Paul L., Dillon, Michael
• Granted Patent: US 10,136,172 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/47202 for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/4753 for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6125 involving transmission via Internet transmission by internet of broadcast information H04H60/82
• CPC Class Codes: H04N 21/6581 Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application

Abstract

Methods and apparatus for providing protected content to subscribers of a managed (e.g., MSO) network via a content source accessible via an internetwork such as the Internet. In one embodiment, a user accesses a programmer website, and requests content. The programmer determines whether the requesting user is permitted to access the content, and what rights or restrictions are associated with the user. This includes authenticating the user as a subscriber of the MSO, and determining the subscriber'"'"'s subscription level. In another embodiment, a user'"'"'s account with the MSO and programmer may be federated, thus a given user will have MSO-specific information regarding its identity (such as login information, GUID, etc.) and/or information regarding subscription level and service details, stored at the programmer. Messages received from the MSO representing permission for the user to access content may also be stored at the programmer site for later reference.

Claims

1-37. -37. (canceled)

38. A method for determining at a content distribution network entity permission of a subscriber of said network to access protected content from a remote source via an Internet, said method comprising:

receiving at said network entity a communication relating to a request for said protected content from a user device, said communication being sent to said content distribution network entity from an entity associated with said remote source;

determining whether said user device is associated to said subscriber of said content distribution network;

when said user device is associated to said subscriber, determining whether said protected content is within an approved level of service of said subscriber; and

when said protected content is within said approved level of service of said subscriber, transmitting a communication to said entity associated with said remote source, said communication causing said remote source to deliver said protected content to said user device.

39. The method of claim 38, wherein said content distribution network comprises a hybrid fiber/non-fiber network having at least one interface to communicate with said remote source via said Internet, and said remote source comprises at least one Internet-based programmer.

40. The method of claim 38, wherein said act of determining whether said user device is associated to said subscriber of said network comprises requiring a user of said device to provide information identifying said user as said subscriber, said information comprising login information.

41. The method of claim 38, wherein when said user device is not associated to said subscriber, said method further comprises transmitting a message to said entity associated with said remote source denying service to said user device.

42. The method of claim 38, wherein when said protected content is not within said approved level of service of said subscriber, said method further comprises transmitting a message to said entity associated with said remote source denying service to said user device.

43. The method of claim 38, wherein said communication relating to a request for said protected content from a user device comprises an obfuscated communication comprising at least one of:

(i) an encrypted communication; and

(ii) a cryptographically hashed communication.

44. The method of claim 38, wherein said communication comprises a globally unique identifier (GUID) that identifies said remote source.

45. The method of claim 44, wherein said communication comprises a globally unique identifier (GUID) that identifies said user device or said subscriber.

46. The method of claim 45, wherein said act of causing said delivery of said protected content to said user device comprises delivering said protected content with a less than complete set of use rights.

47. The method of claim 46, wherein said less than complete set of use rights is determined at least in part based on said act of determining whether said protected content is within a level of service of said subscriber.

48. The method of claim 38, wherein said protected content comprises first-run content not generally available on said Internet.

49. An apparatus for delivery management of a plurality of protected content from a remote content server to a plurality of entitled users, said apparatus comprising:

at least one first interface configured to receive a plurality of information from a user device, said plurality of information comprising;

information that identifies a user of said user device; and

information that identifies a particular one of said plurality of protected content requested by said user;

a first computer program configured to utilize said information that identifies said user to determine whether said user is among said plurality of entitled users;

a second computer program configured to utilize said information that identifies said user and said information that identifies said particular one of said plurality of protected content to determine whether said particular one of said plurality of protected content is within an authorized service class for said user; and

at least one second interface configured to transmit at least one message to a remote content server, said at least one message configured to cause said remote content sever to;

(i) provide said particular one of said plurality of protected content to said user device, or (ii) to deny said user device said particular one of said plurality of protected content;

wherein said at least one message is based at least in part on said determination of whether said user is among said plurality of entitled users, and said determination of whether said particular one of said plurality of protected content is within said authorized service class for said user.

50. The apparatus of claim 49, wherein said at least one first interface comprises a website, and said information that identifies said user of said user device comprises login information and a password established by said user.

51. The apparatus of claim 50, wherein said apparatus is associated with a managed content distribution network having an operator, and said website comprises a third party website not operated by said managed network operator.

52. The apparatus of claim 49, wherein said at least one first interface receives said plurality of information from said remote content server.

53. The apparatus of claim 49, wherein said determination of whether said user is among said plurality of entitled users comprises a query of at least one database comprising a plurality of records, said plurality of records configured to correlate a plurality of identification information to respective ones of said plurality of entitled users.

54. The apparatus of claim 49, wherein said determination of whether said particular one of said plurality of protected content is within said authorized service class for said user comprises using said information that identifies said user to query at least one database comprising a plurality of service detail records for each of said plurality of entitled users.

55. A method for determining whether a user is permitted in a first network to access protected content associated with a second network, said method comprising:

receiving a request for said protected content from said user in said first network;

determining said second network to which said user is associated;

sending a message to said second network, said message comprising;

login and password information entered by said user; and

said request for said protected content; and

receiving, in response to said message, a communication indicating whether said user is permitted in said first network to access said protected content associated with said second network.

56. The method of claim 55, wherein said login and password information comprise information pre-established at said second network to correspond to said user.

57. The method of claim 55, wherein said communication indicating whether said user is permitted in said second network to access said protected content is stored at an entity of said second network.

58. The method of claim 55, further comprising receiving second login and password information entered by said user and specific to said second network.

59. A method of determining whether a particular one of a plurality of protected content may be provided to a user via a first network based at least in part on service details of said user in a second network, said method comprising:

receiving a request for authorization of said user'"'"'s access to said particular one of said plurality of protected content from an entity of said first network, said request for authorization comprising at least a globally unique identifier (GUID) associated with said user and information identifying said particular one of said plurality of protected content;

determining in response to said request, whether a session has been established by said user and said second network;

determining a subscriber identity within said second network based at least in part on said GUID;

retrieving said service details associated with said user;

comparing said service details to said information identifying said particular one of said plurality of protected content; and

when said service details match said information identifying said particular one of said plurality of protected content, providing a message enabling said particular one of said plurality of protected content to be delivered to said user via said first network.

60. The method of claim 59, wherein said method further comprises, when said service details do not match said information identifying said particular one of said plurality of protected content, providing a second message denying said user request for delivery of said particular one of said plurality of protected content.

61. The method of claim 59, wherein said method further comprises, when a session has not been established, establishing a session by requesting login information from said user.

62. The method of claim 59, wherein when said act of comparing yields indeterminate results, enabling said entity of said first network to resend said request for authorization.