Broadcast service access control

• US 6,510,515 B1
• Filed: 08/11/1998
• Issued: 01/21/2003
• Est. Priority Date: 06/15/1998
• Status: Expired due to Term

• Current Assignee: Blackberry Limited
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Raith, Alex Krister
• Primary Examiner(s): Peeso, Thomas R.
• Application Number:
  US09/132,232
• Time in Patent Office: 1,624 Days
• Field of Search: 380/210, 380/212, 380/239, 380/255, 380/258, 380/42, 380/278, 713/168, 713/170, 713/163
• US Class Current: 713/163
• CPC Class Codes: H04H 2201/13 radio data system/radio broadcast data system [RDS/RBDS]
• CPC Class Codes: H04H 60/23 using cryptography, e.g. encryption, authentication, key distribution
• CPC Class Codes: H04H 60/91 Mobile communication networks for accessing the Internet H04H60/85
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/06 Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services
• CPC Class Codes: H04W 76/40 for selective distribution or broadcast

Abstract

Techniques and systems for controlling access to information broadcast over point-to-multipoint resources in radiocommunication systems are described. These techniques can be used to provide controllable access to broadcast information services, e.g., security quote services, sports information services, etc., which broadcast services can be provided in conjunction with more conventional cellular radiocommunication services, e.g., voice calls. Exemplary embodiments of the present invention enable subscribing users'"'"' equipment to output broadcast information using, for example, either a status variable within the remote equipment or encryption for which subscribing devices have a corresponding decryption key.

Claims

1. A method for controlling access to a broadcast information service in a radiocommunication system comprising the steps of:

encrypting information associated with said broadcast information service;

broadcasting said encrypted information over an air interface, wherein said encrypted information is available to a plurality of remote stations;

encrypting a service key for transmission using encryption derived from an A-key, wherein the A-key is derived by a receiving station according to information received wirelessly;

transmitting the service key usable to decrypt said encrypted information as part of message addressed to one or more subscribing ones of said plurality of remote stations; and

periodically changing said service key.

2. The method of claim 1, further comprising the step of:

acknowledging, by said one or more subscribing ones of said plurality of remote stations, reception of said service key.

3. The method of claim 2, wherein said step of transmitting said service key further comprises the step of:

using Over-the-air Activation TeleService to deliver said service key.

4. The method of claim 3, wherein said step of transmitting said current service key further includes transmitting said current service key as a special purpose message.

5. The method of claim 1, wherein said step of transmitting said service key further comprises the step of:

transmitting said service key on a broadcast channel.

6. The method of claim 1, wherein said step of transmitting said service key further comprises the step of:

transmitting said service key on a point-to-point channel.

7. The method of claim 1, further comprising the step of:

transmitting a subsequent service key to said subscribing ones of said plurality of remote stations in advance of using said subsequent service key to encrypt said information.

8. The method of claim 7, further comprising the steps of:

storing, at said subscribing ones of said plurality of remote stations, said subsequent service key and said service key; and

using said subsequent service key to decrypt said information at a time broadcast by said system.

9. The method of claim 7, wherein said step of transmitting said subsequent service key further comprises the step of:

transmitting, with said subsequent service key, a validity time period during which said subsequent service key is usable to decrypt said information.

10. The method of claim 7, wherein said step of transmitting said subsequent service key further comprises the step of:

transmitting, with said subsequent service key, a key index usable by a remote station to determine whether said subsequent service key is valid.

11. The method of claim 7, further comprising the step of storing said service key and said subsequent service key in a memory device in one or more of said plurality of remote stations.

12. The method of claim 11, wherein said memory device includes a removable smart card.

13. The method of claim 1, wherein said step of encrypting information further comprises the step of:

scrambling said information using a predetermined variable.

14. The method of claim 1, wherein said step of transmitting said service key further comprises the step of:

transmitting, with said service key, a validity time during which said service key is usable to decrypt said information.

15. The method of claim 14, further comprising the step of storing said service key and said validity time in a memory device in one or more of said plurality of remote stations.

16. The method of claim 15, wherein said memory device includes a removable smart card.

17. The method of claim 1, wherein said step of transmitting said service key further comprises the step of:

transmitting, with said service key, a key index usable by said one or more subscribing ones of said plurality of remote stations to determine whether said service key is valid.

18. The method of claim 17, further comprising the step of storing said service key and said key index in a memory device in one or more of said plurality of remote stations.

19. The method of claim 18, wherein said memory device includes a removable smart card.

20. The method of claim 1, wherein said service key is further selected from one of a personal identification number (PIN) and a service identification number (SIN).

21. The method of claim 1, wherein said step of transmitting said service key further comprises the step of:

transmitting said subsequent service key multiple times.

22. The method of claim 1, wherein said subscribing remote stations incur a fee for gaining access to said encrypted information.

23. The method of claim 22, wherein said fee is deducted from one of a bank account and a pre-paid account.

24. The method of claim 22, wherein said fee is charged to a credit card account.

25. The method of claim 1, wherein one or more of said plurality of remote stations is further equipped with a memory device and wherein said method further comprises the step of storing said service key in said memory device.

26. The method of claim 25, further comprising storing a prepaid amount in said memory device;

wherein said prepaid amount represents a subscription fee for said broadcast information.

27. The method of claim 26, wherein said memory device includes a removable smart card.

28. A method for controlling access to a broadcast information service in a radiocommunication system comprising the steps of:

broadcasting information associated with said broadcast information service over an air interface, wherein said information is available to a plurality of remote stations;

transmitting an enable signal to a subscribing one or more of said plurality of remote stations; and

outputting, at said subscribing one or more of said plurality of remote stations, said information if said subscribing one or more of said plurality of remote stations has received said enable signal.

29. The method of claim 28, further comprising the step of:

acknowledging, by said subscribing one or more of said plurality of remote stations, reception of said enable signal.

30. The method of claim 28, wherein said step of transmitting said enable signal further comprises the step of:

transmitting said enable signal in a message addressed to said subscribing one or more of said plurality of remote stations.

31. The method of claim 28, wherein said step of transmitting said enable signal further comprises the step of:

transmitting said enable signal on a point-to-point channel.

32. The method of claim 28, wherein said step of transmitting said enable signal further comprising the steps of:

transmitting said enable signal at periodic intervals.

33. A mobile station comprising:

a receiver for receiving broadcast information associated with a broadcast information service on at least one broadcast resource and for receiving enable and disable messages associated with said broadcast information service;

a memory device for storing an enabled/disabled status variable which has a value based upon said enable and disable messages; and

an output device for outputting said broadcast information only when said enabled/disabled status variable has an enabled value.

34. The mobile station of claim 33, wherein said enable/disable status variable includes an expiration time value;

wherein said memory device further stores a receipt date for which a last enable message was received; and

wherein said mobile station maintains a current time value.

35. The mobile station of claim 34, wherein said enable/disable status variable is set to a disabled value if said stored receipt date plus said time expiration time value is less than said current time value.

36. The mobile station of claim 35, wherein said expiration time value is set to said receipt date of said enable message.

37. The mobile station of claim 36, wherein said current time value is set to a value provided over a BCCH.

38. The mobile station of claim 36, wherein said expiration time value is no greater than a predetermined maximum time value.

39. The mobile station of claim 36, wherein said expiration time value is updated to a predetermined value received in said disable message.

86. The mobile station of claim 33, further comprising a second memory device for storing information including a prepaid amount.

87. The mobile station of claim 86, wherein said prepaid amount represents a subscription fee for said broadcast information.

88. The mobile station of claim 87, wherein said second memory device includes a removable smart card.

40. A mobile station comprising:

a receiver for receiving encrypted broadcast information associated with a broadcast information service on at least one broadcast resource and for receiving a current service key usable to decrypt said encrypted information;

an encryption derivation device for deriving the encryption of the current service key according to information received wirelessly by the receiver;

a memory device for storing said current service key; and

an output device for outputting said broadcast information upon decryption of said encrypted information by said current service key.

41. The mobile system of claim 40, wherein said current service key is encrypted prior to transmission from said broadcast information service.

42. The mobile system of claim 41, wherein said current service key encryption is derived from an A-key received by the receiver wirelessly.

43. The mobile system of claim 41, wherein said current service key is encrypted according to a B-key.

44. The mobile system of claim 43, wherein said B-key is an ESN corresponding to said mobile station.

45. The mobile system of claim 41, further comprising a table for storing said plurality of service keys.

46. The mobile system of claim 40, wherein said current service key is valid for a predetermined time period.

47. The mobile system of claim 46, wherein said receiver receives a subsequent service key prior to expiration of said predetermined time period.

48. The mobile system of claim 47, wherein said receiver is configured to update from said current service key to said subsequent service key based on information received on a BCCH.

49. The mobile system of claim 46, wherein said receiver is alerted if said current service key is invalid.

50. The mobile system of claim 40, wherein said memory device further stores a plurality of service keys.

51. The mobile station of claim 40, wherein said memory device includes a removable smart card.

52. The mobile station of claim 51, wherein said removable smart card is further configured to store a prepaid amount, wherein said prepaid amount includes a subscription fee for said broadcast information service.

53. The radiocommunication system of claim 51, wherein said memory device includes a removable smart card.

54. A radiocommunication system for providing broadcast information services to subscribers of said services, the system comprising:

encryption means for encrypting said broadcast information;

transmission means for transmitting said encrypted broadcast information and for transmitting a key usable for decrypting said encrypted broadcast information; and

at least one remote reception means for receiving said encrypted broadcast information and for receiving said transmitted key wherein said at least one remote reception means further comprises;

a derivation means for deriving the encryption of the key according to information received wirelessly by the remote reception means;

a processor means for using said key to decrypt said encrypted information; and

output means for outputting said decrypted information.

55. The radiocommunication system of claim 54, wherein said information is output by the output means a predetermined time after it has been received.

56. The radiocommunication system of claim 55, wherein said broadcast information includes service data associated with one or more broadcast services.

57. The radiocommunication system of claim 56, wherein said service data is output repeatedly by said output means according to a predetermined interval.

58. The radiocommunication system of claim 57, wherein said broadcast information includes a secret variable associated with said service data for determining a mode of delivery of said service data.

59. The radiocommunication system of claim 58, wherein said service data includes Near Real Time (NRT) data and wherein said secret variable enables said mode of delivery of said NRT data to be received without delay.

60. The radiocommunication system of claim 55, wherein said predetermined time is transmitted to said reception means.

61. The radiocommunication system of claim 58, wherein said mode of delivery of said service data includes an abbreviated mode of said service data.

62. The radiocommunication system of claim 61, wherein said mode of delivery of said service data includes a full mode of said service data.

63. The radiocommunication system of claim 62, wherein said mode of delivery of said service data includes an alert indicating that said service data is available.

64. The radiocommunication system of claim 63, wherein said alert includes an audible alert indicating that said service data is available.

65. The radiocommunication system of claim 64, wherein said alert includes a visual alert indicating that said service data is available.

66. The radiocommunication system of claim 65, wherein said mode of delivery of said service data includes a prompt mod e, wherein predetermined information must be provided to said remote station before said service data is output.

67. The radiocommunication system of claim 54, wherein said information includes financial market activity.

68. The radiocommunication system of claim 54, wherein said information includes sports scores.

69. The radiocommunication system of claim 54, wherein said information includes news headlines.

70. The radiocommunication system of claim 54, further comprising a current service key indicating one or more broadcast information services including which of said one or more broadcast information services said at least one reception means is eligible to receive.

71. The radiocommunication system of claim 70, wherein said transmission means is configured to request verification that said at least one reception means is eligible to receive said one or more broadcast services.

72. The radiocommunication system of claim 71, wherein said reception means is configured to respond to said request for verification by providing a validity date.

73. The radiocommunication system of claim 71, wherein said reception means is configured to respond to said request for verification by providing a key index.

74. The radiocommunication system of claim 54, wherein said key further includes a validity time period during which said key is valid.

75. The radiocommunication system of claim 74, wherein said key further includes a key index to validate said key.

76. The radiocommunication system of claim 75, wherein said key is provided over a BCCH.

77. The radiocommunication system of claim 76, wherein an alert is provided if said key is invalid.

78. The radiocommunication system of claim 54, wherein said at least one remote reception means further includes a memory device for storing said key.

79. A method for providing access to a broadcast information service in a radiocommunication system comprising the steps of:

encrypting portions of information associated with said broadcast information service;

broadcasting said information associated with said broadcast information service over an air interface, wherein said information is available to a plurality of remote stations;

encrypting a service key for transmission using encryption derived from an A-key, wherein the A-key is derived by a receiving station according to information received wirelessly;

transmitting the current service key usable to decrypt said encrypted portions of said information as part of message addressed to selective ones of said plurality of remote stations; and

periodically changing said current service key.

80. The method of claim 79, wherein said key is transmitted to subscribing ones of said remote stations.

81. The method of claim 79, wherein said broadcast information includes commercial messages for said broadcast information service, said commercial messages being transmitted without encryption.

82. The method of claim 81, wherein said commercial messages include a description of one or more broadcast information services.

83. The method of claim 79, further comprising the step of periodically removing said encryption from said portions of said information.

84. The method of claim 79, wherein one or more of said plurality of remote stations further includes a memory device, and wherein said method further comprises the step of storing said current service key in said memory device.

85. The method of claim 84, wherein said memory device includes a removable smart card.