Software conditional access system for a media delivery network

• US 8,352,372 B1
• Filed: 09/26/2001
• Issued: 01/08/2013
• Est. Priority Date: 04/02/2001
• Status: Active Grant

• Current Assignee: Bellsouth Intellectual Property Corporation (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Swix, Scott, Watson, P. Thomas, Zimler, Randy S.
• Primary Examiner(s): Hewitt, Calvin
• Assistant Examiner(s): Winter, John M
• Application Number:
  US09/963,779
• Time in Patent Office: 4,122 Days
• Field of Search: 705/26, 705 50- 54, 705/56, 705/59, 725/86
• US Class Current: 705/56
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/42676 for modulating an analogue carrier signal to encode digital information or demodulating it to decode digital information, e.g. ADSL or cable modem
• CPC Class Codes: H04N 21/42684 Client identification by a unique number or address, e.g. serial number, MAC address, socket ID network arrangements, protocols or services for addressing or naming H04L61/00
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/6547 comprising parameters, e.g. for client setup

Abstract

A software conditional access system (CAS) for media services provided to a Media Distribution Device, such as a set top box (STB), is disclosed. The STB may be connected to a Media Delivery Service Provider via a broadband connection. Over the broadband connection, a CAS application may be downloaded to the STB, maintained and dynamically updated. Because the CAS is implemented by software on the STB, it is inexpensive to install, maintain and update. When a user desires to purchase media services through the STB, a request, with identifying information, is sent to the Media Delivery Service Provider via the broadband connection. The service provider cross-references the identifying information with a user'"'"'s account to determine whether to allow the user to view the media service requested. If the service provider determines to allow the user to view the media service, the user'"'"'s account (typically maintained by the service provider) is charged and a key is downloaded via the broadband connection to the STB. The key allows the user to view the requested media service to be presented for user viewing, hearing or other use. After the requested media service ends, after a predetermined amount of time, etc., the CAS application may delete the key.

Claims

1. A method for purchasing a media service from a media delivery service provider, the method comprising:

sending a request, by an application executing on a computer processor of a media distribution device, to the media delivery service provider requesting a media service;

authenticating, by the application, the media distribution device by comparing a permanent virtual circuit established between the media distribution device and the media delivery service provider with a predetermined permanent virtual circuit defined and programmed by the media delivery service provider;

upon determining the media distribution device is authenticated, the application implements;

downloading a software key from the media delivery service provider to the media distribution device; and

after a predetermined amount of time, automatically deleting the software key; and

upon determining the media distribution device is not authenticated;

downloading displayable data to the media distribution device from the media delivery service provider, the displayable data comprising a displayable request to contact a service representative of the media delivery service provider.

2. The method of claim 1, further comprising:

determining whether a timer associated with the software key has expired; and

if so, then deleting the software key.

3. The method of claim 1, further comprising:

identifying information of the media distribution device; and

comparing the identifying information to a customer record at the media delivery service Provider, determining whether the customer record indicates a customer is in good standing, and, if so, then determining that the media distribution device is allowed to purchase the media service.

4. The method of claim 1, wherein the permanent virtual circuit comprises a predetermined physical communications path between the media distribution device and a communications component of the media delivery service provider.

5. The method of claim 1, wherein the permanent virtual circuit comprises a communications link utilizing a broadband connection with the media delivery service provider.

6. The method of claim 3, wherein the step of comparing the identifying information to the customer record further comprises matching a hardware serial number of the media distribution device with a registered hardware serial number of the customer record.

7. The method of claim 1, wherein the permanent virtual circuit comprises a communications link utilizing an asymmetric digital subscriber line with the media delivery service provider.

8. A computer program product for purchasing a media service from a media delivery service provider, the computer program product comprising a non-transitory storage medium containing instructions that when executed by a processing circuit perform the steps of:

sending a request from a media distribution device to a media delivery service provider requesting a media service;

authenticating the media distribution device by comparing a permanent virtual circuit established between the media distribution device and the media delivery service provider with a predetermined permanent virtual circuit defined and programmed by the media delivery service provider;

upon determining media distribution device is authenticated;

downloading a software key from the media delivery service provider; and

after a predetermined amount of time, automatically deleting the software key; and

upon determining the media distribution device is not authenticated;

downloading displayable data to the media distribution device from the media delivery service Provider, the displayable data comprising a displayable request to contact a service representative of the media delivery service provider.

9. The product of claim 8, further comprising an instruction for performing the following:

if the permanent virtual circuit matches the permanent virtual circuit defined and programmed by the media delivery service provider, then determining whether decryption and presentation aspects of a media service out-of-date, and, if so, updating the decryption and presentation aspects; and

if the permanent virtual circuit does not match the permanent virtual circuit defined and programmed by the media delivery service provider, then downloading the displayable data.

10. The product of claim 8, further comprising an instruction for performing the following:

if the permanent virtual circuit matches the permanent virtual circuit defined and programmed by the media delivery service provider, then determining if the permanent virtual circuit is associated with a customer record in good standing; and

if the permanent virtual circuit does not match the permanent virtual circuit defined and programmed by the media delivery service provider, then

downloading the displayable data to the media distribution device from the media delivery service provider, the displayable data comprising a displayable request to contact the service representative of the media delivery service provider.