Controlled use of devices

• US 7,055,041 B1
• Filed: 09/21/2000
• Issued: 05/30/2006
• Est. Priority Date: 09/24/1999
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Stober, Thomas, Hansmann, Uwe, Merk, Lothar
• Primary Examiner(s): Wright, Norman M.
• Application Number:
  US09/666,255
• Time in Patent Office: 2,077 Days
• Field of Search: 713/202, 713/201, 713/169, 713/171
• US Class Current: 713/169
• CPC Class Codes: H04N 21/4183 providing its own processing capabilities, e.g. external module for video decoding
• CPC Class Codes: H04N 21/44204 Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/4751 for defining user accounts, e.g. accounts for children
• CPC Class Codes: H04N 7/163 by receiver means only

Abstract

A method for selectively controlling the operation of a device for authenticating a user. The user may have a multifunction smart card that is capable of downloading and executing programs, based upon personal and authentication account data, which is selectably stored on the smart card.

Claims

1. A method for selectively controlling personal use of a device having an operation which is controllable by an electronic control circuit, comprising the steps of:

using said electronic control circuit to control the use of said device using user-related data and/or user initiated data to select different types of operations, said electronic control circuit being controlled by a personal authentication token and which data is processed by a device operation control logic,

said user related data on said personal authentication token comprising selective information concerning a user-desired type of operation of said device wherein logic which evaluates said data is located at least partly on said personal identification token and provides said device operation control logic with a signal which is able to filter some permitted types of operations, thereby allowing the user access to said device and other options emanating from the control logic embedded in said personal authentication token, with security levels as between said device and said personal authentication token being controlled by said personal authentication token, reading operation type specific data from said device for processing by said device operation control logic with the result that the data is user-related data stored on the personal authentication token and is maintained in the possession of the user,

processing both data for providing a result,

deciding according to said result if a desired user-type of operation of said device will be allowed or not, and

enabling or preventing said desired type of operation of said device according to said decision.

2. The method according to claim 1 in which said step of processing user-related data and operation type specific data is performed at least partly on said user associated authentication means by means of computing resources comprising said user-associated authentication means.

3. The method according to claim 2 comprising the step of comparing current time information read from said device to predetermined time limits stored on said user authentication means for delimiting the duration of operation of said device.

4. The method according to claim 3, for selectively controlling operation of TV devices where the step of reading operation type specific data comprises reading at least one of:

current date, current time, available channels, show-view-codes.

5. A program storage device readable by machine, tangible embodying a program of instruction executable by the machine to perform method steps for causing controlled personal use of a device having operation which is controllable by an electronic control circuit, said method steps comprising the steps of claim 4.

6. The method according to claim 3 used for selectively controlling operation of cars where the step of reading operation type specific data comprises reading at least one of:

current date, current time, geographic position via a GPS interface, accumulated duration of use in a predetermined time interval.

7. A program storage device readable by machine, tangible embodying a program of instruction executable by the machine to perform method steps for causing controlled personal use of a device having operation which is controllable by an electronic control circuit, said method steps comprising the steps of claim 6.

8. The method according to claim 3 for selectively controlling operation of at least one computer device.

9. An article of manufacture comprising a computer usable medium having computer readable program code means embodied therein for causing controlled personal use of a device having operation which is controllable by an electronic control circuit, the computer readable program code means in said article of manufacture comprising computer readable program code means for causing the computer to effect the steps of claim 3.

10. An article of manufacture comprising a computer usable medium having computer readable program code means embodied therein for causing controlled personal use of a device having operation which is controllable by an electronic control circuit, the computer readable program code means in said article of manufacture comprising computer readable program code means for causing the computer to effect the steps of claim 2.

11. A device, the operation of which is controllable by an electronic control circuit, and being used as a controllable object according to the method according to claim 1.

12. A user-authentication means arranged for interaction with an operation control logic for a device to as defined in claim 11.

13. The user-authentication means according to claim 12, being incorporated in a Smartcard.

14. The user-authentication means according to claim 13, wherein said Smartcard being selected from a Java™

card, a Smartcard for Windows™

, or a Smart card based on the Mult OS™

operating system.

15. Interface means comprising connection means to an electronic control circuit controlling the operation of a device as defined in claim 11 and intended for performing the method steps comprising:

using said electronic control circuit to control the use of said device using user-related data and/or user initiated data to select different types of operations, said electronic control circuit being controlled by a personal authentication token and which data is processed by a device operation control logic,

said user related data on said personal authentication token comprising selective information concerning a user-desired tape of operation of said device wherein logic which evaluates said data is located at least partly on said personal identification token and provides said device operation control logic with a signal which is able to filter some permitted types of operations, thereby allowing the user access to said device and other options emanating from the control logic embedded in said personal authentication token, with security levels as between said device and said personal authentication token being controlled by said personal authentication token, reading operation type specific data from said device for processing by said device operation control logic, with the result that the data is user-related data stored on the personal authentication token and is maintained in the possession of the user,

processing both data for providing a result,

deciding according to said result if a desired user-type of operation of said device will be allowed or not, and

enabling or preventing said desired type of operation of said device according to said decision.

16. An interface means according to claim 15, arranged for communicating with user-authentication means arranged for interaction with an operation control logic.

17. Interface means according to claim 16, which is a Set-top box for being added-on a device.

18. An article of manufacture comprising a computer usable medium having computer readable program code means embodied therein for causing controlled personal use of a device having operation which is controllable by an electronic control circuit, the computer readable program code means in said article of manufacture comprising computer readable program code means for causing the computer to effect the steps of claim 1.

19. A program storage device readable by machine, tangible embodying a program of instruction executable by the machine to perform method steps for causing controlled personal use of a device having operation which is controllable by an electronic control circuit, said method steps comprising the steps of claim 1.