IPTV follow me content system and method

• US 8,819,720 B2
• Filed: 07/02/2012
• Issued: 08/26/2014
• Est. Priority Date: 04/02/2008
• Status: Active Grant

• Current Assignee: TiVo Corporation (Adeia Inc.)
• Original Assignee: Qwest Communications International Incorporated (Lumen Technologies, Inc.)
• Inventors: Casey, Steven M., Selvadurai, Gnanasegeran, Castro, Felipe, Khan, Waqar
• Primary Examiner(s): Zecher, Cordelia
• Assistant Examiner(s): DOAN, TRANG T
• Application Number:
  US13/539,712
• Publication Number:
  US 20120272260A1
• Time in Patent Office: 785 Days
• US Class Current: 725/25
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4325 by playing back content from the storage medium reproduction of recorded television signals H04N5/76; reproduction of recorded television signals H04N9/79
• CPC Class Codes: H04N 21/441 Acquiring end-user identification , e.g. using personal code sent by the remote control or by inserting a card
• CPC Class Codes: H04N 21/4415 using biometric characteristics of the user, e.g. by voice recognition or fingerprint scanning cryptography using biological data H04L9/3231; authentication in networks using biometric H04L63/0861
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/472 End-user interface for requesting content, additional data or services; End-user interface for interacting with content, e.g. for content reservation or setting reminders, for requesting event notification, for manipulating displayed content end-user interfaces for retrieving video data from a database G06F16/739; network services for supporting unicast streaming H04L65/612
• CPC Class Codes: H04N 21/4753 for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6334 for authorisation, e.g. by transmitting a key wireless communications network key management H04W12/04; wireless communications network access security H04W12/08
• CPC Class Codes: H04N 21/64322 IP

Abstract

Tools are provided for distributing access-restricted content in an internet protocol television (“IPTV”) environment based on portable entitlement keys. Such tools can include a decoder, an encoder, and a network entitlement handler. The decoder may be configured to receive a key associated with entitlement information, and transmit the entitlement information over a network. The encoder may be configured to receive content from content providers, and to encode the content to create IP-compatible content, with access restrictions based on entitlement. The network entitlement handler may be configured to receive a request for requested content from the decoder; receive the access-restricted content including (including the requested content) from the encoder; and transmit the requested content over the network to the decoder using IP, when the decoder is entitled to receive the requested content.

Claims

1. A system for distributing access-restricted content in an internet protocol-based television environment, the system comprising:

a decoder unit, in operative communication with a network and locatable in the network by an internet protocol address, and configured to;

receive a key from a key store configured to store the key, the key being associated with a set of access rights for an account; and

transmit, over the network, entitlement information relating to the set of access rights; and

a network entitlement handler unit, in operative communication with the network, and configured to;

receive, over the network from the decoder unit, a request for a requested content set;

receive, over the network, a set of access-restricted content, the set of access-restricted content having limited accessibility based at least in part on the set of access rights and comprising at least a portion of the requested content set;

receive the internet protocol address corresponding to the requesting decoder unit; and

transmit the set of access-restricted content over the network to the network address using the internet protocol.

2. The system of claim 1, further comprising a plurality of portable entitlement keys, each entitlement key comprising:

the key store;

a key provider unit, in operative communication with the key store, and configured to provide the key associated with the key store to the decoder unit; and

a portable chassis, operatively coupled with the key store and the key provider unit.

3. The system of claim 2, wherein the portable chassis encloses at least one of the key store or the key provider unit.

4. The system of claim 2, wherein the key provider unit is further configured to:

be compatible with a plurality of decoder units; and

provide the key to the plurality of decoder units.

5. The system of claim 2, wherein the decoder unit comprises a port, the port being configured to:

provide an electromagnetic interface for at least a portion of the portable chassis such that the decoder unit may receive the key from the key provider unit through the port.

6. The system of claim 2, wherein the decoder unit comprises a port, the port being configured to:

provide an electromagnetic interface for at least a portion of the portable chassis such that the decoder unit may receive the key from the key provider unit through the port; and

provide a physical interface for at least a portion of the portable chassis such that at least a portion of the portable chassis may be removably coupled to the decoder unit at the port.

7. The system of claim 1, wherein:

the decoder unit is further configured to receive a requesting key from the key store associated with a requesting account; and

the network entitlement handler unit is further configured to;

receive the entitlement information relating to the set of access rights associated with the requesting account;

determine, based at least in part on the entitlement information, whether the requesting account has an entitlement to receive the requested content set; and

transmit the transmitted portion of the requested content set only if the requesting account has the entitlement to receive the requested content set.

8. The system of claim 2, wherein:

the decoder unit comprises a port configured to;

removably couple the portable chassis with the decoder unit; and

receive a requesting key from the key provider unit; and

the network entitlement handler unit is further configured to;

receive the entitlement information relating to the set of access rights associated with the requesting account;

determine, based at least in part on the entitlement information, whether the requesting account has an entitlement to receive the requested content set; and

transmit the transmitted portion of the requested content set only if the requesting account has the entitlement to receive the requested content set, wherein at least a portion of the entitlement information relates to whether the portable chassis is coupled with the decoder unit at the port.

9. The system of claim 1, wherein:

the set of access rights is further associated with at least one user, the at least one user having authority to use the account;

the decoder unit is further configured to receive a first key from the key store associated with a requesting account; and

the network entitlement handler unit is further configured to receive a second key, operable to verify the authority to use the account.

10. The system of claim 9, wherein the network entitlement handler unit is further configured to receive the second key from the decoder unit.

11. The system of claim 1, wherein the requested content set comprises configuration information, at least a portion of the configuration information being uniquely associated with the account.

12. The system of claim 1, further comprising a content store, comprising stored content uniquely associated with the account, wherein the requested content set comprises at least a portion of the stored content.

13. The system of claim 1, further comprising an encrypter unit, in operative communication with the network entitlement handler unit, and configured to encrypt at least a portion of the requested content set before transmitting the transmitted portion of the requested content set over the network.

14. The system of claim 1, further comprising a network tester unit, in operative communication with the network and the network entitlement handler unit, and further configured to:

determine a set of characteristics relating to the network before transmitting the transmitted portion of the requested content set over the network; and

alter the transmitted portion of the requested content set based at least in part on the determination of the set of characteristics.

15. The system of claim 14, wherein:

determining the set of characteristics relating to the network comprises determining the throughput of the network; and

altering the transmitted portion of the requested content set comprises;

determining a compatible portion of the requested content set which can be effectively transmitted over the network based at least in part on the determination of the throughput of the network; and

transmitting only the compatible portion of the requested content set over the network.

16. The system of claim 14, wherein:

determining the set of characteristics relating to the network comprises determining that at least a portion of the requested content set comprises incompatible content, the incompatible content being incompatible with at least a portion of the set of characteristics; and

altering the transmitted portion of the requested content set comprises, before transmitting the transmitted portion of the requested content set over the network, altering at least the incompatible content to make the transmitted portion of the requested content set compatible with the set of characteristics.

17. The system of claim 14, wherein:

determining the set of characteristics relating to the network comprises determining a geographic location of the network address relating to the decoder unit; and

altering the transmitted portion of the requested content set comprises, before transmitting the requested content set over the network, altering at least a portion of the requested content set based at least in part on the geographic location of the network address relating to the decoder unit.

18. The system of claim 1, further comprising a network tester, in operative communication with the network and the network entitlement handler unit, and further configured to:

determine a set of characteristics relating to the network before transmitting the transmitted portion of the requested content set over the network; and

alter the transmission scheme based at least in part on the determination of the set of characteristics.

19. The system of claim 1, further comprising a computer readable medium, the computer readable medium comprising the decoder unit and being in operative communication with the key store, the key store being stored on a computer readable storage device.

20. The system of claim 1, wherein the decoder unit comprises a television set-top box.

21. The system of claim 1, wherein the decoder unit comprises a software decoder on a personal computer.