Method and apparatus for securely providing billable multicast data

• US 6,862,684 B1
• Filed: 07/28/2000
• Issued: 03/01/2005
• Est. Priority Date: 07/28/2000
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: DiGiorgio, Rinaldo
• Primary Examiner(s): Peeso, Thomas R.
• Application Number:
  US09/627,842
• Time in Patent Office: 1,677 Days
• Field of Search: 713/163, 713/168, 713/176, 713/182, 713/189, 713/193, 713/200, 713/201
• US Class Current: 713/163
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1403 Architecture for metering, charging or billing
• CPC Class Codes: H04L 12/18 for broadcast or conference , e.g. multicast
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

The present invention comprises a method and apparatus for securely providing billable multicast data. The invention describes a solution that provides an architecture for enabling different types of security devices to operate interchangeably in very large consumer networks, corporate networks, for authentication and metered access to services, as well as payment. An embodiment of the invention comprises a mechanism for ensuring that only authorized parties may obtain access to a particular data stream. For example, the present invention provides a way build a restricted-channel system. In a restricted-channel system, a multicast server transmits encrypted information that can be deciphered by authorized multicast client programs or multicast client programs operating under authorized conditions. Access to the multicast data is allowed when the data is appropriately decrypted or otherwise verified and/or the payment is obtained from a portable device such as a smart card.

Claims

1. A system comprising:

a multicast server configured to transmit at least one packet in a plurality of multicast packets,

a portable device configured to obtain an encrypted multicast data, said portable device configured to determines which of said multicast packets is encrypted based on the randomness of data in said multicast packets, wherein said portable device comprises at least one cryptographic key for unlocking said encrypted multicast data;

a portable device interface, wherein said portable device interface interconnects said multicast server and said portable device.