Systems and methods for authorizing access to network services using information obtained from subscriber equipment

• US 9,113,185 B2
• Filed: 06/23/2010
• Issued: 08/18/2015
• Est. Priority Date: 06/23/2010
• Status: Active Grant

• Current Assignee: Sling Media LLC (Dish Network Corporation)
• Original Assignee: Sling Media Incorporated (Dish Network Corporation)
• Inventors: Lankford, David Charles
• Primary Examiner(s): SHEPARD, JUSTIN E
• Application Number:
  US12/821,983
• Publication Number:
  US 20110321079A1
• Time in Patent Office: 1,882 Days
• Field of Search: 725/109
• US Class Current: 1/1
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 65/612 for unicast
• CPC Class Codes: H04N 21/254 Management at additional data server, e.g. shopping server, rights management server arrangements for maintenance or administration in data networks H04L41/00; network services using third party service providers H04L67/53
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/266 Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/418 External card to be used in combination with the client device, e.g. for conditional access
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/47202 for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/4753 for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6582 Data stored in the client, e.g. viewing habits, hardware capabilities, credit card number arrangements where receivers interact with the broadcast H04H20/38

Abstract

Systems and methods are described for authorizing access to network service based upon information obtained from a set-top box (STB) or other subscriber equipment associated with the user requesting access to the network service. The network service suitably contacts a subscriber device associated with the user via the network in response to a request for access that is received from the user. Information obtained from the subscriber device is processed to thereby determine if the user is authorized to use the service. If the user is authorized, then the service is provided via the network. Access to an online video stream, for example, can be conditioned upon the requesting user having an appropriate account with a cable, direct broadcast satellite (DBS) or other service that can be verified through contact with the user'"'"'s STB or other subscriber equipment.

Claims

1. A method to authenticate a user of a client device for a service on a network, the method comprising:

receiving, by a server on the network, a request for access to the service from the client device via the network;

in response to the request, the server contacting a subscriber device associated with the user via the network, the subscriber device comprising a set-top box or a television receiver, the subscriber device receiving content from a content provider via a communications channel other than the network in accordance with a subscription-based service with the content provider;

obtaining, by the server via the network, authorization information associated with the subscription-based service from the subscriber device, the authorization information being obtained from the content provider by a security module of the subscriber device;

processing, by the server, the authorization information obtained from the subscriber device to thereby determine if the user is authorized to use the service; and

providing, by the server, the service to the client device via the network if the user is authorized to use the service.

2. The method of claim 1 further comprising obtaining an address associated with the subscriber device from an address server on the network, and wherein the obtaining comprises contacting the subscriber device via the network using the associated address.

3. The method of claim 1 further comprising requesting additional data from the user in response to the request for access to the service, receiving the additional data from the user, and identifying the subscriber device from the additional data.

4. The method of claim 1 wherein the service is a streaming video service and wherein the providing comprises providing streaming video content via the network.

5. The method of claim 4, wherein the subscriber device is a set top box that receives television content from a paid television service via the communications channel other than the network.

6. The method of claim 5 wherein the authorization information verifies that the user is a subscriber to the paid television service.

7. The method of claim 6 wherein the authorization information verifies that the user is authorized to view a particular media stream requested from the service by the user.

8. The method of claim 7 wherein the particular media stream corresponds to content available via a premium television channel, and wherein the authorization information verifies that the user has a subscription to the premium television channel.

9. The method of claim 6 further comprising transmitting a message a service center associated with the paid television service in response to receiving the request for access to the service, and wherein the authorization information obtained from the subscriber device comprises a digital credential transmitted to the subscriber device by the service center in response to the message transmitted to the service center.

10. The method of claim 1 wherein the service is a streaming video service that provides any of a plurality of program streams to users via the network, wherein the method further comprises receiving a user selection of a particular one of the program streams to be provided to the user, wherein the authorization information obtained from the subscriber device comprises an indication that the user is authorized to receive the particular program stream, and wherein the providing comprises providing the particular program stream to the user via the network if the user is authorized.

17. The method of claim 1 further comprising establishing a persistent connection with a connection service on the network, receiving a request to establish a connection to the network server via the persistent connection and contacting the network server to establish the connection over the network, wherein the providing comprises providing at least the portion of the subscriber information to the network server via the connection.

18. The method of claim 1 wherein the network server is a streaming video service that provides streams of content corresponding to the television programming receivable by the subscriber device, and wherein the subscriber device is associated with the user of the network server, and wherein the at least the portion of the subscriber information is provided to the network server to allow the network server to determine whether the user of the network server has subscribed to a particular stream of content that is available from the network server.

11. A subscriber device comprising:

a security module of the subscriber device to interact with a television content provider to obtain authorization information associated with a subscription-based service from the television content provider;

a program interface configured to receive, via a television distribution channel, television programming in accordance with the subscription-based service with a television content provider and the authorization information associated with the subscription-based service from the television content provider;

a display interface configured to provide signals representing the television programming to a display;

a network interface to a network that is separate from the television distribution channel; and

a controller configured to receive, via the network interface, an authorization request from a server operating on the network and, in response to the authorization request, to provide at least a portion of the authorization information associated with the subscription-based service to the server operating on the network, wherein the server processes the portion of the authorization information to determine if a user of a client device is authorized to use the subscription-based service before providing the subscription-based service to the client device via the network if the user is authorized to use the subscription-based service.

12. The subscriber device of claim 11, wherein the portion of the authorization information confirms that a user associated with the subscriber device is a subscriber to the subscription-based service.

13. The subscriber device of claim 11, wherein the portion of the authorization information credential confirms describes content that the user is permitted to receive and display using the subscriber device.

14. The subscriber device of claim 11, wherein:

the security module is configured to receive the authorization information via the program interface in response to the authorization request; and

the controller is configured to relay the portion of the authorization information from the security module to the server operating on the network.

15. The subscriber device of claim 11, wherein the subscriber device comprises a set-top box or a television receiver.

16. A method comprising:

receiving, by a subscriber device via a television distribution channel, subscription information associated with a subscription-based service with a content provider, the subscriber device comprising a set-top box or a television receiver, wherein the subscription information is obtained from the content provider by a security module of the subscriber device that prevents unauthorized use of the subscriber device and the subscription information describes programming receivable by the subscriber device from the content provider via the television distribution channel that is authorized for viewing;

subsequently receiving, by the subscriber device, an authorization request from a network server via a network other than the television distribution channel; and

in response to the authorization request, providing, by the subscriber device, at least a portion of the subscription information to the network server via the network, wherein the network server processes the subscription information obtained from the subscriber device to thereby determine if a user of a client device is authorized to use the subscription-based service before providing the subscription-based service to the client device via the network if the user is authorized to use the subscription-based service.