Method, apparatus, computer program, data storage medium and computer program product for preventing reception of media data from a multicast service by an unauthorized apparatus

• US 8,745,382 B2
• Filed: 01/15/2007
• Issued: 06/03/2014
• Est. Priority Date: 01/20/2006
• Status: Active Grant

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Franz, Matthias, Horn, Gnther
• Primary Examiner(s): HOLDER, BRADLEY W
• Application Number:
  US12/087,985
• Publication Number:
  US 20090138719A1
• Time in Patent Office: 2,696 Days
• Field of Search: 713/163, 713/150, 713/162
• US Class Current: 713/163
• CPC Class Codes: H04L 12/185 with management of multicast group membership
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/611 for multicast or broadcast systems for broadcast or conference H04L12/18; arrangements for broadcast or distribution combined with broadcast H04H20/00; arrangements for broadcast applications with a direct linkage to broadcast information or to broadcast space-time H04H60/00; selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS], H04W4/06
• CPC Class Codes: H04L 9/0836 using tree structure or hierarchical structure
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/41265 having a remote control device for bidirectional communication between the remote control device and client device unidirectional remote control device H04N21/42204
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/436 Interfacing a local distribution network, e.g. communicating with another STB or one or more peripheral devices inside the home
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/6405 Multicasting data broadcast and multicast in packet switching networks H04L12/18
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

The method for the transmission of media data from a multicast service by a first apparatus to a plurality of second apparatuses is suitable for preventing reception of the media data by an unauthorized second apparatus using a security process. A first apparatus is provided which can be used to provide the media data protected by a security process. A third apparatus is provided which can be used to perform the security process with the first apparatus, performance of the security process between the first apparatus and the third apparatus and, on the basis of this, interchange of at least security data between the first apparatus and the third apparatus in order to provide the media data. A second apparatus is selected which can be used to perform at least one reception process for receiving the media data. A first data transmission link is selected which can be used to couple the first apparatus and the second apparatus at least for the purpose of transmitting the media data. The provided media data is received using the second apparatus via the first data transmission link.

Claims

1. A method for the transmission of media data as a multicast service to a plurality of second apparatuses, comprising:

providing a first apparatus which multicasts the media data protected by a security process to the plurality of second apparatuses;

providing a third apparatus to initiate messages and exchange security data with the first apparatus for a security process preventing an unauthorized second apparatus from receiving the media data;

selectively determining, by a third apparatus, a chosen second apparatus from a plurality of second apparatuses to receive the media data where the third apparatus acts as a remote control for the chosen second apparatus;

selecting a first data transmission link to connect the first apparatus and the chosen second apparatus to transmit the media data;

receiving the media data at the chosen second apparatus via the first data transmission link; and

selecting a second data transmission link to connect the third apparatus and the chosen second apparatus and at least part of the security data is transmitted from the third apparatus to the chosen second apparatus via the second data transmission link,

wherein a third data transmission link connects the first apparatus and the third apparatus and the security data is exchanged between the first apparatus and the third apparatus using the third data transmission link, and

wherein control data is transmitted via at least one of the first data transmission link, the second data transmission link, and the third data transmission link.

2. The method as claimed in claim 1, wherein

a further data transmission link connects the first apparatus and the third apparatus, and

the security data is exchanged between the first apparatus and the third apparatus via the further data transmission link.

3. The method as claimed in claim 1, wherein the media data is streamed to the chosen second apparatus so that the media data is continuously processed by the chosen second apparatus during transmission.

4. The method as claimed in claim 3, wherein the media data is displayed at the chosen second apparatus during transmission.

5. The method as claimed in claim 1, wherein the media data is downloaded as an electronic object by the chosen second apparatus, and

the media data is displayed at the chosen second apparatus only after the electronic object has been completely received.

6. The method as claimed in claim 1, wherein

the first apparatus is a server, and/or the third apparatus is a mobile phone or smartcard, and/or the chosen second apparatus is a laptop, personal computer, personal digital assistant or mobile phone, and/or the first data transmission link is a WLAN, DSL or UMTS connection, and/or the second data transmission link is a Bluetooth, infrared, WLAN or cable connection, and/or the third data transmission link is a WLAN, DSL or UMTS connection.

7. The method as claimed in claim 1, wherein

the third apparatus provides a first parameter and/or the chosen second apparatus provides a second parameter to select at least one of the first data transmission link, the second data transmission link, and the third data transmission link.

8. The method as claimed in claim 1,

wherein the security process includes at least one of a registration process, an authentication process, an integrity process, and an encoding process.

9. The method as claimed in claim 1,

wherein the security data includes at least one of registration data, cryptographic data, and synchronization data.

10. The method as claimed in claim 1,

wherein the security data includes registration data, synchronization data, and a cryptographic key or digital signature.

11. The method as claimed in claim 1, wherein

receipt of at least a part of the security data is required for authorized reception of the media data, and

a same part of the security data is transmitted to each second apparatus for authorized reception.

12. The method as claimed in claim 1, wherein the method is part of an multimedia broadcast/multicast service (MBMS) security architecture.

13. The method as claimed in claim 1, wherein the chosen second apparatus and the third apparatus are part of a single local area network.

14. The method as claimed in claim 1, further comprising playing the media data with a visual and/or acoustic media data player.

15. The method as claimed in claim 1, wherein the third apparatus sends messages to the chosen second apparatus.

16. The method as claimed in claim 1, wherein the third apparatus encodes the media data with an encryption and/or decryption process.

17. The method as claimed in claim 1, wherein,

the first data transmission link, the second data transmission link and the third data transmission link are independent of one another.

18. A system to transmit media data as a multicast service, comprising:

a first hardware apparatus which multicasts the media data protected by a security process to a plurality of second apparatuses;

a third apparatus to initiate messages and exchange security data with the first hardware apparatus for a security process preventing unauthorized second apparatuses from receiving the media data; and

a first data transmission link which couples the first hardware apparatus and the plurality of second apparatuses, the first data transmission link being used to transmit the media data from the first hardware apparatus to a chosen second apparatus, the chosen second apparatus selectively determined from the plurality of second apparatuses by the third apparatus, where the third apparatus acts as a remote control for the chosen second apparatus,

a second data transmission link which connects the third apparatus and the chosen second apparatus and at least part of the security data is transmitted from the third apparatus to the chosen second apparatus via the second data transmission link; and

a third data transmission link which connects the first apparatus and the third apparatus and the security data is exchanged between the first apparatus and the third apparatus using the third data transmission link,

wherein the media data is received at the chosen second apparatus via the first data transmission link and control data is transmitted via at least one of the first data transmission link, the second data transmission link, and the third data transmission link.

19. A non-transitory computer readable storage medium storing a program which when executed on a computer causes the computer to execute a method for the transmission of media data as a multicast service to a plurality of second apparatuses, the method comprising:

providing a first apparatus which multicasts the media data protected by a security process to the plurality of second apparatuses;

providing a third apparatus configured to select a transmission enabling the third apparatus to initiate messages and exchange security data with the first apparatus for a security process preventing an unauthorized second apparatus from receiving the media data;

selectively determining, by the third apparatus, a chosen second apparatus from the plurality of second apparatuses which receives the media data where the third apparatus acts as a remote control for the chosen second apparatus;

selecting a first data transmission link which couples the first apparatus and the chosen second apparatus to transmit the media data;

receiving the media data at the chosen second apparatus via the first data transmission link;

selecting a second data transmission link to connect the third apparatus and the chosen second apparatus and at least part of the security data is transmitted from the third apparatus to the chosen second apparatus via the second data transmission link; and

connecting, via a third data transmission link, the first apparatus and the third apparatus, and the security data is exchanged between the first apparatus and the third apparatus using the third data transmission link, and

wherein control data is transmitted via at least one of the first data transmission link, the second data transmission link, and the third data transmission link.