Method for transferring encrypted useful data objects

• US 8,762,282 B2
• Filed: 09/17/2010
• Issued: 06/24/2014
• Est. Priority Date: 11/07/2003
• Status: Active Grant

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Meyer, Oliver, Schmidt, Andreas, Trauberg, Markus
• Primary Examiner(s): NIQUETTE, ROBERT R
• Application Number:
  US12/885,131
• Publication Number:
  US 20110007898A1
• Time in Patent Office: 1,376 Days
• Field of Search: None
• US Class Current: 705/52
• CPC Class Codes: H04L 12/189 in combination with wireless systems selective distribution or broadcast in wireless communication networks H04W4/06
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 80/12 Application layer protocols, e.g. WAP [Wireless Application Protocol]

Abstract

An apparatus and method for transferring encrypted useful data objects (NDO) to a first telecommunication terminal (TG1), wherein at least one encrypted useful data object is initially transferred from a switching component to the first telecommunication terminal. Time information (SABS) is transferred from the switching component to the first telecommunication terminal indicating up to which moment in time a rights object (RO) associated with the at least one encrypted useful data object will arrive. Once the rights object received by the first telecommunication terminal, the telecommunication terminal checks if the moment in time indicated in the time information has elapsed. If the moment has not elapsed, the first telecommunication terminal issues a signal relating to the receipt of a useful data object via a user interface.

Claims

1. A method for transferring encrypted data objects to a first telecommunication terminal comprising:

transferring at least one encrypted data object to the first telecommunication terminal from a switching component of a telecommunication network;

transferring a time information to the first telecommunication terminal from the switching component, specifying the time-point by when a rights object will also have arrived at the first telecommunication terminal, said rights object being assigned to the at least one encrypted data object and containing the key and the usage rights for the assigned data object;

the first telecommunication terminal receiving a rights object which is assigned to the at least one data object;

the first telecommunication terminal not outputting a signal via a user interface which has been assigned to this first telecommunication terminal, said signal concerning the receipt of a data object, until either the time-point specified in the time information has passed or a predefined time-point in the first telecommunication terminal following receipt of the data object has passed, or the at least one rights object which is received for activating the data object has been received.

2. The method as claimed in claim 1, according to which if a rights object is received before the time-point which is specified in the time information or before a predefined time-point in the telecommunication terminal, the user interface outputs a signal concerning the receipt of a useable data object.

3. The method as claimed in claim 1, according to which if the time-point which is specified in the time information or the predefined time-point in the telecommunication terminal is passed before a rights objects is received, the user interface merely outputs a signal concerning the receipt of an encrypted data object.

4. The method as claimed in claim 1, according to which the at least one encrypted data object together with the time information is transferred to the first telecommunication terminal by means of a delivery message.

5. The method as claimed in claim 1, according to which the time information is transferred to the first telecommunication terminal by means of a notification message which specifies that a data object is available at the switching component for delivery to the first telecommunication terminal.

6. The method as claimed claim 1, according to which the at least one encrypted data object is sent by a data provision component of the telecommunication network or by a second telecommunication terminal to the switching component for forwarding to the first telecommunication terminal.

7. The method as claimed in claim 6, according to which the data provision component is designed as a server of a content provider.

8. The method as claimed in claim 1, according to which following receipt of the time information the first telecommunication terminal instructs a time measuring entity, which is assigned to said first telecommunication terminal, to measure the time until the time-point which is specified in the time information or until the time-point which is predefined in the telecommunication device.

9. The method as claimed in claim 1, according to which the first telecommunication terminal has a communication entity for carrying out the communication with the switching component and a management entity, which is connected to the communication entity, for managing the encrypted data objects.

10. The method as claimed in claim 9, according to which following receipt of the at least one encrypted data object, the communication entity asks the management entity whether a rights object is already present for the at least one encrypted data object and, if not, instructs the time measuring entity to measure the time.

11. The method as claimed in claim 1, according to which the at least one encrypted data object and the relevant assigned rights object are transferred to the first telecommunication terminal via two different transport channels.

12. The method as claimed in claim 1, according to which the messages and data are transferred between the switching component and the first telecommunication terminal in the context of the Multimedia Messaging Service.

13. The method as claimed in claim 12, according to which the delivery message is an MMS delivery message and/or the notification message is an MMS recipient notification, wherein the MMS delivery message and/or MMS recipient notification have a separate header field to which the time information is assigned as a field value.

14. The method as claimed in claim 1, according to which data to and from the first and/or second telecommunication terminal is sent via an air interface.

15. The method as claimed in claim 14, according to which the first and/or second telecommunication terminal includes a radio module and is designed in particular as a mobile telephone, a cordless telephone, or a portable computer.

16. The method as claimed in claim 14, according to which the transfer of messages to and from the first and/or second telecommunication terminal takes place by means of WAP protocols or the Hypertext Transfer Protocol (http).

17. The method as claimed in claim 1, according to which the first telecommunication terminal is part of a first telecommunication network.

18. The method as claimed in claim 17, according to which the first telecommunication network is implemented as a mobile radio network which works in particular according to the GSM or UMTS standard.

19. The method as claimed in claim 17, according to which. the switching component is designed as part of a second telecommunication network which is connected to the first telecommunication network, said second telecommunication network being implemented in particular as a telecommunication network which is based on Internet protocols such as the Hypertext Transfer Protocol.

20. The method as claimed in claim 19, according to which the first and the second telecommunication networks are connected together by means of a connection component which is implemented in particular as a WAP gateway.

21. The method as claimed in claim 1, according to which the data object contains text information, audio information, video information, an executable, program, a software module or a combination of these information elements.

22. The method as claimed 1, in claim wherein the data object comprises at least one of text data, image data, video data, audio data, executable programs, software components, and multimedia data.

23. A telecommunication arrangement comprising a switching component and at least one first telecommunication terminal, wherein the telecommunication arrangement is designed to carry out a method comprising:

at least one encrypted data object is transferred to the first telecommunication terminal by a switching component of a telecommunication network;

a time information is transferred to the first telecommunication terminal by the switching component, specifying the time-point by when a rights object will also have arrived at the first telecommunication terminal, said rights object being assigned to the at least one encrypted data object and containing the key and the usage rights for the assigned data object;

the first telecommunication terminal receives a rights object which is assigned to the at least one data object;

the first telecommunication terminal does not output a signal via a user interface which has been assigned to this first telecommunication terminal, said signal concerning the receipt of a data object, until either the time-point specified in the time information has passed or a predefined time-point in the first telecommunication terminal following receipt of the data object has passed, or the at least one rights object which is received for activating the data object has been received.

24. A method for transferring encrypted data objects to a first telecommunication terminal, comprising:

transferring at least one encrypted data object to the first telecommunication terminal by a switching component of a telecommunication network;

transferring a time information to the first telecommunication terminal by the switching component specifying the time-point when a rights object will also have arrived at the first telecommunication terminal, said rights object being assigned to the at least one encrypted data object and containing the key and the usage rights for the assigned data object;

receiving at the first telecommunication terminal a rights object, which is assigned to the at least one data object; and

outputting from the first telecommunication terminal a signal via a user interface which has been assigned to this first telecommunication terminal, said signal concerning the receipt of a data object, when either the time-point specified in the time information has passed or a predefined time-point in the first telecommunication terminal following receipt of the data object has passed, or the at least one rights object which is received for activating the data object has been received.

25. The method according to claim 24, wherein if the rights object is received before the time-point which is specified in the time information or before a predefined time-point in the telecommunication terminal, the user interface outputs a signal concerning the receipt of a useable data object.

26. The method according to claim 24, wherein if the time-point which is specified in the time information or the predefined time-point in the telecommunication terminal is passed before a rights objects is received, the user interface merely outputs a signal concerning the receipt of an encrypted data object.

27. The method according to claim 24, wherein at least one encrypted data object together with the time information is transferred to the first telecommunication terminal by means of a delivery message.

28. The method according to claim 24, wherein the time information is transferred to the first telecommunication terminal by means of a notification message which specifies that a data object is available at the switching component for delivery to the first telecommunication.

29. The method according to claim 24, wherein at least one encrypted data object is sent by a data provision component of the telecommunication network or by a second telecommunication terminal to the switching component for forwarding to the first telecommunication terminal.

30. The method according to claim 24, wherein following receipt of the time information the first telecommunication terminal instructs a time measuring entity, which is assigned to said first telecommunication terminal, to measure the time until the time-point which is specified in the time information or until the time-point which is predefined in the telecommunication device.

31. The method according to claim 24, wherein the first telecommunication terminal has a communication entity for carrying out the communication with the switching component and a management entity, which is connected to the communication entity, for managing the encrypted data objects.

32. The method according to claim 31, wherein following receipt of the at least one encrypted data object, the communication entity asks the management entity whether a rights object is already present for the at least one encrypted data object and, if not, instructs the time measuring entity to measure the time.

33. The method according to claim 24, wherein at least one encrypted data object and the relevant assigned rights object are transferred to the first telecommunication terminal via two different transport channels.

34. The method according to claim 33, wherein the messages and data are transferred between the switching component and the first telecommunication terminal in the context of the Multimedia Messaging Service.

35. The method according to claim 34, wherein the delivery message is an MMS delivery message and/or the notification message is an MMS recipient notification, wherein the MMS delivery message and/or MMS recipient notification have a separate header field to which the time information is assigned as a field value.

36. The method according to claim 24, wherein data to and from the first and/or second telecommunication terminal is sent via an air interface.

37. The method according to claim 36, wherein the first and/or second telecommunication terminal includes a radio module and is designed in particular as a mobile telephone, a cordless telephone, or a portable computer.

38. The method according to claim 37, wherein the transfer of messages to and from the first and/or second telecommunication terminal takes place by means of WAP protocols or the Hypertext Transfer Protocol (http).

39. The method according to claim 24, wherein the first telecommunication terminal is part of a first telecommunication network.

40. The method according claim 39, wherein the first telecommunication network is implemented as a mobile radio network which works in particular according to the GSM or UMTS standard.

41. The method according to claims 40, wherein the switching component is designed as part of a second telecommunication network which is connected to the first telecommunication network, said second telecommunication network being implemented In particular as a telecommunication network which is based on Internet protocols such as the Hypertext Transfer Protocol.

42. The method according to claim 41, wherein the first and the second telecommunication networks are connected together by means of a connection component which is implemented in particular as a WAP gateway.

43. The method according to claim 42, wherein the data provision component is designed as a server of a content provider.

44. The method according to claim 43, wherein the data object contains text information, audio information, video information, an executable program, a software module or a combination of these information elements.

45. A telecommunication arrangement comprising a switching component and at least one first telecommunication terminal, wherein the telecommunication arrangement is designed to carry out a method as claimed in the claims 24.