Method and system for securely communicating between a primary service provider and a partner service provider

• US 8,533,852 B2
• Filed: 12/19/2007
• Issued: 09/10/2013
• Est. Priority Date: 12/19/2007
• Status: Active Grant

• Current Assignee: DIRECTV, LLC (AT&T, Inc.)
• Original Assignee: The DIRECTV Group, Inc. (AT&T, Inc.)
• Inventors: Chaudhry, Kapil
• Primary Examiner(s): Orgad, Edan
• Assistant Examiner(s): Tolentino, Roderick
• Application Number:
  US11/960,496
• Publication Number:
  US 20090164777A1
• Time in Patent Office: 2,092 Days
• Field of Search: 726 2- 21, 380/229, 380247-250, 705 65- 69, 713172-174, 713/186
• US Class Current: 726/27
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A method and system for authenticating a partner service provider and a primary service provider includes a network and, a partner service provider generating a request for a first encrypted token from a partner service provider and communicating the request to the network. An authentication web service receives the request for the first encrypted token from the network and generates the first encrypted token. The partner service provider generates a request for data with the first encrypted token and communicates the request for data to the network. A data web service receives the request for data and communicates the request for data from the data web service to the authentication web service. The authentication web service validates the request for data and communicates a validation result to the data web service. The data web service communicates data to the partner service provider from the data web service after validating.

Claims

1. A method comprising:

generating a request for a first encrypted token at a partner service provider system, said partner service provider system having a partner site identifier associated therewith;

communicating the request for the first encrypted token to an authentication web service server;

generating the first encrypted token by encrypting at least the partner site identifier at the authentication web service server;

communicating the first encrypted token to the partner service provider from the authentication web service server;

generating a request for data with the first encrypted token at the partner service provider system;

communicating the request for data with the first encrypted token to a data web service server;

communicating the request for data from the data web service server to the authentication web service server;

validating the request for data at the authentication web service server using the encrypted token;

communicating a validation result to the data web service server;

communicating data to the partner service provider system from the data web service server in response to the validation result; and

communicating data from the partner service provider system to one or more user devices.

2. A method as recited in claim 1 wherein generating a first encrypted token comprises generating the first encrypted token having an expiration time.

3. A method as recited in claim 1 further comprising generating a second encrypted token at the authentication web service server.

4. A method as recited in claim 3 wherein generating a first encrypted token comprises generating the first encrypted token having a first expiration time and wherein generating a second encrypted token comprises generating the second encrypted token in response to a second expiration time, later than the first expiration time.

5. A method as recited in claim 3 further comprising communicating the second encrypted token from the authentication web service server to the partner service provider system.

6. A method as recited in claim 5 further comprising communicating the second encrypted token from the partner service provider system to the data web service server with a second request for data.

7. A method as recited in claim 6 further comprising after communicating the second encrypted token, communicating the second encrypted token to the authentication web service server and authenticating the second encrypted token.

8. A method as recited in claim 1 wherein generating a request for a first encrypted token comprises generating the request including a partner site identifier and wherein generating the first encrypted token comprises generating the first encrypted token using the partner site identifier.

9. A method as recited in claim 1 wherein generating a request for a first encrypted token comprises generating the request including a partner site identifier and wherein generating the first encrypted token comprises generating the first encrypted token by encrypting the partner site identifier and an expiration time for the first encrypted token.

10. A method as recited in claim 1 wherein generating a request for a first encrypted token comprises generating the request including a partner site identifier and dummy variables and wherein generating the first encrypted token comprises generating the first encrypted token by encrypting the partner site identifier and dummy variables.

11. A system comprising:

a network;

a partner service provider having a partner site identifier associated therewith generating a request for a first encrypted token from a partner service provider and communicating the request to the network;

an authentication web service receiving the request for the first encrypted token from the network and generating the first encrypted token by encrypting at least the partner site identifier;

communicating the first encrypted token to the partner service provider from the authentication web service;

said partner service provider generating a request for data with the first encrypted token and communicating the request for data with the first encrypted token to the network; and

a data web service receiving the request for data with the first encrypted token and communicating the request for data with the first encrypted token from the data web service to the authentication web service;

said authentication web service validating the request for data using the first encrypted token and communicating a validation result to the data web service;

said data web service communicating data to the partner service provider from the data web service in response to the validation result; and

said partner service provider communicating the data to one or more networked user devices.

12. A system as recited in claim 11 wherein the network comprises the Internet.

13. A system as recited in claim 11 wherein the authentication web service is within a primary service provider.

14. A system as recited in claim 11 wherein the authentication web service and the data web service are within a primary service provider.

15. A system as recited in claim 11 wherein the first encrypted token comprises a first expiration time.

16. A system as recited in claim 15 wherein the authentication web service generates a second encrypted token.

17. A system as recited in claim 16 wherein the authentication web service generates a second encrypted token having a second expiration time, later than the first expiration time.

18. A system as recited in claim 16 wherein the authentication web service communicates the second encrypted token from the authentication web service to the partner service provider.

19. A system as recited in claim 18 wherein the wherein the partner service provider communicates the second encrypted token to the data web service with a second request for data.

20. A system as recited in claim 19 wherein the data web service communicates the second encrypted token to the authentication web service and authenticates the second encrypted token.

21. A system as recited in claim 11 wherein the first encrypted token comprises the partner site identifier and an expiration time for the first encrypted token.

22. A system as recited in claim 11 wherein the first encrypted token comprises the partner site identifier and a dummy variable.

23. A system as recited in claim 11 wherein the data comprises program guide data.