Digital rights management of streaming contents and services

• US 9,160,720 B2
• Filed: 02/25/2014
• Issued: 10/13/2015
• Est. Priority Date: 12/06/2011
• Status: Active Grant

• Current Assignee: Sony Interactive Entertainment LLC (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.), Sony Network Entertainment International LLC (Sony Group Corp.)
• Inventors: Pedlow, Leo, Xiong, True, Holcomb, Eric, Fielder, Kathy
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US14/189,914
• Publication Number:
  US 20140181525A1
• Time in Patent Office: 595 Days
• Field of Search: 713/168, 713/189, 726/7, 726/26, 705/50
• US Class Current: 1/1
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 65/612 for unicast

Abstract

Managing digital rights of contents and services streamed to a client device, including: receiving and validating a certificate from the client device; enabling the client device to log into and communicate with a server using a secure protocol to establish a private relationship between the client device and the server; and transmitting a resource identifier to the client device using the secure protocol when the private relationship is established.

Claims

1. A method of managing digital rights of contents and services streamed to a client device, the method comprising:

authenticating the client device by a server;

enabling the client device to log into and communicate with the server using a secure protocol when the client device is authenticated by the server;

receiving an encryption key from a service provider and generating a hash value and a private key associated with the encryption key;

encrypting a resource identifier using the encryption key and the hash value;

transmitting the encrypted resource identifier, the encryption key, and the private key to the client device using the secure protocol.

2. The method of claim 1, wherein the resource identifier is an expirable resource identifier including an expiration date.

3. The method of claim 2, wherein the expirable resource identifier expires after the expiration date.

4. The method of claim 2, wherein the expirable resource identifier becomes invalid after a configurable period of time.

5. The method of claim 1, wherein the resource identifier identifies resources including servers, services, and contents.

6. The method of claim 1, further comprising:

receiving an updated encryption key from the service provider and generating an updated hash value and an updated private key associated with the updated encryption key; and

hashing and encrypting the resource identifier using the updated encryption key and the updated private key.

7. A digital rights management system for streaming contents and services to a client device, the system comprising:

a server;

a registration unit configured to authenticate the client device and to enable the client device to log into and communicate with the server using a secure protocol when authentication of the client device is completed,

wherein the authentication of the client device is based on an existing client-server relationship between the client device and the server; and

an interface unit configured to;

(1) receive an encryption key from a service provider and generating a hash value and a private key associated with the encryption key;

(2) encrypt a resource identifier using the encryption key and the hash value; and

(3) transmit the encrypted resource identifier, the encryption key, and the private key to the client device using the secure protocol.

8. The system of claim 7, wherein the existing client-server relationship is used to periodically refresh the resource identifier to prevent unauthorized access to the contents and services.

9. The system of claim 7, wherein the contents and services identified by the resource identifier are streamed to the client device located in at least one of home, concert venue, sporting event, movie, and conference.

10. The system of claim 7, wherein the registration unit is further configured to authenticate the client device when the client device presents a valid certificate to the server, wherein the valid certificate from the client device comprises

at least one of a registered television identifier, a server-specific certificate, a user token, and a secure protocol.

11. The system of claim 7, wherein the resource identifier includes a Uniform Resource Identifier (URI).

12. The system of claim 7, wherein the resource identifier includes a Uniform Resource Locator (URL).

13. The system of claim 7, wherein the client device includes an Internet Protocol television (IPTV).

14. The system of claim 7, wherein the server is configured as a video streaming service.

15. The system of claim 7, wherein the server is configured as a video on-demand service.

16. A non-transitory computer storage medium storing a computer program to manage digital rights of contents and services streamed to a client device, the computer program comprising executable instructions that cause a computer to:

authenticate the client device by a server;

enable the client device to log into and communicate with the server using a secure protocol when the client device is authenticated by the server;

receive an encryption key from a service provider and generate a hash value and a private key associated with the encryption key;

encrypt a resource identifier using the encryption key and the hash value;

transmit the encrypted resource identifier, the encryption key, and the private key to the client device using the secure protocol.

17. The non-transitory computer storage medium of claim 16, further comprising executable instructions that cause the computer to:

receive a request from the client device for streaming of the contents and services referenced by the resource identifier; and

stream the contents and services stored in a location identified by the resource identifier.

18. The non-transitory computer storage medium of claim 16, wherein the resource identifier is an expirable resource identifier including an expiration date.

19. The non-transitory computer storage medium of claim 18, further comprising executable instructions that cause the computer to

invalidate the expirable resource identifier after the expiration date.

20. The non-transitory computer storage medium of claim 16, further comprising executable instructions that cause the computer to:

receive an updated encryption key from the service provider and generate an updated hash value and an updated private key associated with the updated encryption key; and

hash and encrypt the resource identifier using the updated encryption key and the updated private key.