Secure content transfer systems and methods to operate the same

• US 8,775,319 B2
• Filed: 05/15/2006
• Issued: 07/08/2014
• Est. Priority Date: 05/15/2006
• Status: Active Grant

• Current Assignee: DIRECTV, LLC (AT&T, Inc.)
• Original Assignee: The DIRECTV Group, Inc. (AT&T, Inc.)
• Inventors: Kahn, Raynold M., Klauss, Peter M., Dulac, Stephen P., Schlacht, David N., Basse, Hanno, James, Thomas H.
• Primary Examiner(s): Coppola, Jacob C.
• Application Number:
  US11/434,404
• Publication Number:
  US 20070265978A1
• Time in Patent Office: 2,976 Days
• Field of Search: 705 50- 79
• US Class Current: 705/59
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 50/10 Services
• CPC Class Codes: G06Q 50/184 Intellectual property management
• CPC Class Codes: G07F 17/0014 for vending, access and use of specific services not covered anywhere else in G07F17/00 meter-controlled dispensing of liquid, gas or electricity G07F15/00

Abstract

Secure content transfer systems and methods to operate the same are disclosed. An example system includes a content server to encrypt content according to an encryption key, and to transfer the encrypted content, the encryption key and a license to a client that supports a digital rights management technology. The example system further includes a broadcast system headend to determine the encryption key, wherein the broadcast system headend is physically separate from the content server, and a digital rights management license server to provide the license.

Claims

1. A system comprising:

a client device including a digital rights manager configured to control access to encrypted content by a person based on a license having an encryption key embedded therein, and a decrypter configured to decrypt the encrypted content based on the embedded encryption key, the client device located at a customer premises;

an integrated receiver/decoder (IRD) device including a first interface configured to receive the encryption key and the license having the encryption key embedded therein, an encrypter configured to encrypt content according to the received encryption key to form the encrypted content, and a second interface configured to transfer the encrypted content and the received license having the encryption key embedded therein to the client device, the IRD device physically separate from the client device and located at the customer premises;

a broadcast system headend configured to determine the encryption key, to provide the encryption key to the IRD device, and to provide the content unencrypted to the IRD device, the broadcast system headend located at a service-provider location physically remote from the customer premises; and

a digital rights management license server configured to receive the encryption key from the broadcast system headend, to generate the license, to embed the encryption key in the license, and to provide the license with the encryption key embedded therein to the IRD device, the digital rights management license server located physically remote from the customer premises,

wherein the broadcast system headend comprises;

a third interface to receive a content transfer authorization request from the IRD device;

a key server configured to determine the encryption key based on at least one of the content transfer authorization request or the content; and

a fourth interface to send the encryption key and a license request to the digital rights management license server.

2. A system as defined in claim 1, wherein the broadcast system headend is configured to broadcast at least one of a satellite broadcast signal, a wireless broadcast signal, a wired broadcast signal, a cable television broadcast signal, an Ultra High Frequency (UHF)/ Very High Frequency (VHF) radio frequency broadcast signal, a Multi-channel Multi-point Distribution System (MMDS) broadcast signal, a Local Multi-point Distribution System (LMDS) broadcast signal, an Internet-based broadcast signal, a cellular broadcast signal, a power-line broadcast signal, a fiber optic broadcast signal, or any point-to-point or multicast Internet Protocol (IP) delivery mechanism.

3. A system as defined in claim 1, wherein the content data is at least one of video data, audio data, computer data, interactive data, gaming data, messaging data, or website data.

5. A system as defined in claim 1, wherein the IRD device is configured to detect a content transfer initiated by the client device via at least one of an interface of the IRD device communicatively coupled to the client device, a user interface implemented by at least one of the IRD device or the client device, a content management application executing in the IRD device, a transfer request received from the client device, a command received from the broadcast transmission device, or a command received from the digital rights management license server.

6. A system as defined in claim 1, wherein the IRD device comprises a fifth interface configured to send the content transfer authorization request to the broadcast system headend.

7. A system as defined in claim 1, wherein the IRD device comprises:

a security device configured to at least one of store the license having the encryption key embedded therein, store the encryption key or decrypt an encrypted version of the encryption key.

8. A system as defined in claim 1, wherein the IRD device is configured to receive encrypted content from the client device, and to decrypt the received content based on a second encryption key received from the broadcast system headend.

4. A system comprising:

a client device including a digital rights manager configured to control access to encrypted content by a person based on a license having an encryption key embedded therein, and a decrypter to decrypt the encrypted content based on the embedded encryption key, the client device located at a customer premises;

an integrated receiver/decoder (IRD) device including an encrypter configured to encrypt content according to the encryption key to form the encrypted content, and an interface configured to transfer the encrypted content and the license having the encryption key embedded therein to the client device, the IRD device physically separate from the client device and located at the customer premises;

a conditional access system configured to determine the encryption key, the conditional access system located at a service-provider location physically remote from the customer premises, wherein the conditional access system comprises a first interface configured to receive a content transfer authorization request from the IRD device, a key server configured to determine the encryption key based on at least one of the content transfer authorization request or the content, and a second interface configured to send the encryption key and a license request to a digital rights management license server, and to receive the license with the encryption key embedded therein from the digital rights management license server;

a broadcast transmission device configured to provide the content to the IRD device, the broadcast transmission device located at the service-provider location; and

the digital rights management license server configured to receive the encryption key from the conditional access system, to generate the license, to embed the encryption key in the license, and to provide the license with the encryption key embedded therein to the IRD device via the second interface of the conditional access system, the digital rights management license server located physically remote from the customer premises.

9. A system as defined in claim 4, wherein the broadcast transmission device is configured to broadcast at least one of a satellite broadcast signal, a wireless broadcast signal, a wired broadcast signal, a cable television broadcast signal, an Ultra High Frequency (UHF)/Very High Frequency (VHF) radio frequency broadcast signal, a Multi-channel Multi-point Distribution System (MMDS) broadcast signal, a Local Multi-point Distribution System (LMDS) broadcast signal, an Internet-based broadcast signal, a cellular broadcast signal, a power-line broadcast signal, a fiber optic broadcast signal, or any point-to-point or multicast Internet Protocol (IP) delivery mechanism.

10. A system as defined in claim 4, wherein the content data is at least one of video data, audio data, computer data, interactive data, gaming data, messaging data, or website data.

11. A system as defined in claim 4, wherein the IRD device is configured to detect a content transfer initiated by the client device via at least one of an interface of the IRD device communicatively coupled to the client device, a user interface implemented by at least one of the IRD device or the client device, a content management application executing in the IRD device, a transfer request received from the client device, a command received from the broadcast transmission device, or a command received from the digital rights management license server.

12. A system as defined in claim 4, wherein the IRD device comprises an third interface to send the content transfer authorization request to the conditional access system.

13. A system as defined in claim 4, wherein the IRD device comprises a security device configured to at least one of store the license having the encryption key embedded therein, store the encryption key or decrypt an encrypted version of the encryption key.

14. A system as defined in claim 4, wherein the IRD device is configured to receive encrypted second content from the client device, and to decrypt the received second content based on a second encryption key received from the broadcast transmission device.