Method and system for managing digital rights for content

• US 8,745,654 B1
• Filed: 02/09/2012
• Issued: 06/03/2014
• Est. Priority Date: 02/09/2012
• Status: Active Grant

• Current Assignee: DIRECTV, LLC (AT&T, Inc.)
• Original Assignee: The DIRECTV Group, Inc. (AT&T, Inc.)
• Inventors: Chaudhry, Kapil, Chung, Jin H.
• Primary Examiner(s): Goodarzi, Nasser
• Assistant Examiner(s): Peng, Fred
• Application Number:
  US13/370,170
• Time in Patent Office: 845 Days
• Field of Search: 725/25, 725 27- 31
• US Class Current: 725/25
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04N 21/2225 Local VOD servers
• CPC Class Codes: H04N 21/2396 characterized by admission policies admission control, resource allocation in open networks H04L12/5692; arrangements for network security using user profiles for access control H04L63/102; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25841 involving the geographical location of the client retrieval from the Internet by querying based on geographical locations G06F16/9537; arrangements for identifying locations of receiving stations in broadcast systems H04H60/51; location of the user terminal in data switching networks H04L67/52; services making use of the location of users or terminals in wireless networks H04W4/02; locating users or terminals in wireless networks H04W64/00
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/6334 for authorisation, e.g. by transmitting a key wireless communications network key management H04W12/04; wireless communications network access security H04W12/08

Abstract

A method and system for providing digital rights to a user device is set forth. The user device forms a selection signal from guide data. The user device communicates a digital rights determination signal to a first authentication module in response to selecting. The first authentication module communicates a query signal to a second authentication module to determine whether the user device is authorized to receive content associated with the selection signal. The second authentication module communicates an address of a content delivery module to the user device through the first authentication module when the user device is authorized. A digital rights management server communicates a request for content to a content delivery module using the address of the content delivery module. The content delivery module communicates content to the user device corresponding to the selection signal. The user device displays content on the display associated with the user device.

Claims

1. A method comprising:

receiving guide data at a user device;

displaying the guide data on a display associated with the user device;

selecting content from the guide data and forming a selection signal for the content;

communicating a digital rights determination signal to a first authentication module in response to selecting;

performing a concurrency check on the digital rights determination signal;

in response to performing the concurrency check, communicating a query signal from the first authentication module to a second authentication module to determine whether the user device is authorized to receive content associated with the selection signal;

when the user device is authorized, communicating an address of a content delivery module for the content from the second authentication module to a digital rights management server through the first authentication module; and

communicating a request for the content to a content delivery module using the address of the content delivery module;

communicating the content to the user device; and

displaying content on the display associated with the user device.

2. The method as recited in claim 1 wherein prior to receiving guide data at a receiving device, forming an account at a primary service provider associated with the second authentication module by storing account data in a memory of the primary service provider.

3. The method as recited in claim 2 wherein forming the account comprises communicating an electronic token to the user device and wherein the digital rights determination signal comprises the electronic token.

4. The method as recited in claim 3 wherein communicating the digital rights determination signal comprises communicating the digital rights determination signal with the electronic token and wherein communicating the query signal comprises communicating the query signal with the electronic token.

5. The method as recited in claim 2 wherein forming the account comprises communicating a signature key formed using a time at the first authentication module to the user device and wherein the digital rights determination signal comprises the signature key.

6. The method as recited in claim 5 wherein communicating the digital rights determination signal comprises communicating the digital rights determination signal with the signature key and wherein communicating the query signal comprises communicating the query signal with the signature key.

7. The method as recited in claim 2 wherein forming the account comprises communicating a reference identifier based on an account number at the first authentication module to the user device and wherein the digital rights determination signal comprises the reference identifier.

8. The method as recited in claim 7 wherein communicating the digital rights determination signal comprises communicating the digital rights determination signal with the reference identifier and wherein communicating the query signal comprises communicating the query signal with the reference identifier.

9. The method as recited in claim 2 wherein forming the account comprises communicating an electronic token, signature key and a reference identifier to the user device and wherein the digital rights determination signal comprises the electronic token, the signature key and the reference identifier.

10. The method as recited in claim 9 wherein communicating the digital rights determination signal comprises communicating the digital rights determination signal with the electronic token, the signature key and the reference identifier and wherein communicating the query signal comprises communicating the query signal with the electronic token, the signature key and the reference identifier.

11. The method as recited in claim 1 wherein communicating a digital rights determination signal comprises communicating a digital rights determination signal and a user site identifier corresponding to a location of the user device and further comprising determining the address of the content delivery module in response to user site identifier.

12. The method as recited in claim 1 wherein communicating the digital rights determination signal comprises communicating the digital rights determination signal from a digital rights management module of the user device.

13. The method as recited in claim 1 wherein receiving guide data at the user device comprises receiving guide data at a mobile user device.

14. A system comprising:

a user device receiving guide data and displaying the guide data on a display associated therewith, said user device forming a selection signal for content from the guide data;

a first authentication module in communication with the user device;

the user device comprising digital rights management module that communicates a digital rights determination signal to the first authentication module;

the first authentication module performing a concurrency check on the digital rights determination signal and in response to performing the concurrency check, communicating a query signal to a second authentication module to determine whether the user device is authorized to receive the content associated with the selection signal;

the second authentication module communicating an address for the content of a content delivery module to a digital rights management module through the first authentication module when the user device is authorized;

a digital rights management server communicating a request for the content to a content delivery module using the address of the content delivery module;

the content delivery module communicating the content to the user device; and

the user device displaying the content at the user device.

15. The system as recited in claim 14 wherein a primary service provider associated with the second authentication module forms an account prior to receiving guide data at a receiving device by storing account data in a memory of a primary service provider.

16. The system as recited in claim 14 wherein the second authentication module communicates an electronic token to the user device and wherein the digital rights determination signal is communicated with the electronic token.

17. The system as recited in claim 16 wherein the user device communicates the digital rights determination signal with the electronic token and wherein the first authentication module communicates the query signal with the electronic token.

18. The system as recited in claim 14 wherein the second authentication module communicates a signature key formed using a time at the first authentication module to the user device and wherein the digital rights determination signal is communicated with the signature key.

19. The system as recited in claim 18 wherein the user device communicates the digital rights determination signal with the signature key and wherein the first authentication module communicates the query signal with the signature key.

20. The system as recited in claim 14 wherein the second authentication module communicates a reference identifier based on an account number at the first authentication module to the user device and wherein the digital rights determination signal is communicated with the reference identifier.

21. The system as recited in claim 20 wherein the user device communicates the digital rights determination signal with the reference identifier and wherein the first authentication module communicates the query signal with the reference identifier.

22. The system as recited in claim 14 wherein a primary service provider forms an account and generates an electronic token, signature key and a reference identifier, said primary service provider communicates the electronic token, signature key and the reference identifier to the user device and wherein the digital rights determination signal is communicated with the electronic token, the signature key and the reference identifier.

23. The system as recited in claim 22 wherein the user device communicates the digital rights determination signal with the electronic token, the signature key and the reference identifier and wherein the first authentication module communicating the query signal with the electronic token, the signature key and the reference identifier.

24. The system as recited in claim 14 wherein the user device communicates the digital rights determination signal with a user site identifier corresponding to a location of the user device and the second authentication module determines the address of the content delivery module in response to user site identifier.

25. The system as recited in claim 14 wherein a digital rights determination module communicates the digital rights determination signal to the first authentication module.

26. The system as recited in claim 14 wherein the user device comprises a mobile user device.

27. A method comprising:

communicating an encrypted token and a reference identifier corresponding to an account from a first authentication module to a user device;

receiving guide data at a user device;

displaying the guide data on a display associated with the user device;

selecting content from the guide data and forming a selection signal;

communicating a digital rights determination signal with the encrypted token, reference identifier and a user location to a second authentication module in response to selecting;

performing a concurrency check on the digital rights determination signal;

in response to performing the concurrency check, communicating a query signal with the encrypted token, the reference identifier and the user location from the second authentication module to the first authentication module to determine whether the user device is authorized to receive content associated with the selection signal;

when the user device is authorized, determining an address of a content delivery module in response to the user location;

communicating the address of the content delivery module from the first authentication module to a digital rights management module through the second authentication module;

communicating a request for content to the content delivery module using the address of the content delivery module;

communicating content to the user device corresponding to the selection signal; and

displaying content on the display associated with the user device.

28. A method as recited in claim 27 wherein the user location comprises a uniform resource locator.