Television receiver-based network traffic control

• US 9,681,196 B2
• Filed: 08/27/2014
• Issued: 06/13/2017
• Est. Priority Date: 08/27/2014
• Status: Active Grant

• Current Assignee: Dish Technologies LLC (Echostar Corporation)
• Original Assignee: Echostar Technologies LLC (Echostar Corporation)
• Inventors: Mountain, Dale Llewelyn
• Primary Examiner(s): Pendleton, Brian T
• Assistant Examiner(s): Gee, Alexander
• Application Number:
  US14/470,392
• Publication Number:
  US 20160066056A1
• Time in Patent Office: 1,021 Days
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/4385 Multiplex stream processing, e.g. multiplex stream decrypting
• CPC Class Codes: H04N 21/44245 Monitoring the upstream path of the transmission network, e.g. its availability, bandwidth
• CPC Class Codes: H04N 21/4542 Blocking scenes or portions of the received content, e.g. censoring scenes
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/485 End-user interface for client configuration
• CPC Class Codes: H04N 21/4882 for displaying messages, e.g. warnings, reminders arrangements for providing short real-time information to substation in data switching networks H04L12/1895
• CPC Class Codes: H04N 21/6143 involving transmission via a satellite

Abstract

Monitoring data routed by a satellite television receiver that serves as a gateway in a home network. In the context of privacy control, the television receiver may be configured to detect certain types of data, such as social security or bank numbers, username/password information, device usage information, etc., routed by the same over a broadband connection to one or more resources located outside of the home network, and then implement one or more steps so that a user may be notified and the traffic possibly blocked to prevent or mitigate the unauthorized transfer or reporting of data.

Claims

1. A method, comprising:

receiving, by a television receiver in a home network environment, packet traffic generated by network devices connected to the home network environment, wherein the network devices connected to the home network environment are different from the television receiver, and wherein the packet traffic is directed to systems external to the home network environment, wherein the television receiver includes;

one or more audio/video decoders operable to convert encoded video and audio into a format suitable for output to display devices;

a network interface operable to establish network connections with systems in the home network environment and external to the home network environment, wherein the packet traffic is received using the network interface; and

an output interface operable to output audio and video signals for use by display devices;

generating, by the television receiver, a first output signal encoding for a first interface that includes a first item for activating or deactivating a scanning service for scanning contents of packets of the packet traffic to identify data unauthorized for transfer external to the home network environment;

receiving, by the television receiver, input corresponding to selection of the first item for activating the scanning service;

activating, by the television receiver, the scanning service;

generating, by the television receiver, a second output signal encoding for a second interface that includes a second item for activating or deactivating a notification service for generating messages indicating that transfers of data unauthorized for transfer external to the home network environment have been attempted;

receiving, by the television receiver, input corresponding to selection of the second item for activating the notification service;

activating, by the television receiver, the notification service;

scanning, by the television receiver, contents of packets of the packet traffic to identify data unauthorized for transfer external to the home network environment, wherein scanning includes scanning at least one of a header and a body of packets of the packet traffic to identify data unauthorized for transfer external to the home network environment;

determining, by the television receiver, that one or more first particular packets of the packet traffic include first data unauthorized for transfer external to the home network environment;

blocking, by the television receiver, the one or more first particular packets of the packet traffic that include the first data from being routed external to the home network environment;

generating, by the television receiver, a first message indicating that a first transfer of data unauthorized for transfer external to the home network environment has been attempted, wherein the first message includes a first option that, when activated, generates a first command to retain in memory a first action to implement upon subsequent identification of the first data, wherein the first action corresponds to blocking additional packets of packet traffic that include the first data;

sending, by the television receiver, the first message to a display device for display thereon, wherein sending the first message includes sending the first message to the display device for display as part of an electronic programming guide;

receiving, by the television receiver, input corresponding to activation of the first option;

determining, by the television receiver, that one or more second particular packets of the packet traffic include the first data unauthorized for transfer external to the home network environment;

blocking, by the television receiver, the one or more second particular packets of the packet traffic from being routed external to the home network environment based on the first command retained in memory;

determining, by the television receiver, that one or more third particular packets of the packet traffic include second data unauthorized for transfer external to the home network environment, wherein the second data is different from the first data;

generating, by the television receiver, a second message indicating that a second transfer of data unauthorized for transfer external to the home network environment has been attempted, wherein the second message includes a second option that, when activated, generates a second command to retain in memory a second action to implement upon subsequent identification of the second data, wherein the second action corresponds to ignoring additional packets of data that include the second data;

sending, by the television receiver, the second message to the display device for display thereon;

receiving, by the television receiver, input corresponding to activation of the second option;

routing, by the television receiver, the one or more third particular packets of the packet traffic external to the home network environment; and

routing, by the television receiver, other packets of the packet traffic to systems external to the home network environment.

2. The method of claim 1, further comprising:

identifying, by the television receiver, a particular network device connected to the home network environment as a source of the one or more first particular packets of the packet traffic that include the first data; and

blocking, by the television receiver, additional packets of the packet traffic originating from the particular network device from transfer external to the home network environment.

3. The method of claim 1, wherein sending the first message includes transmitting the first message by email, transmitting the first message to a mobile application, sending first the message by text message, or generating a third output signal encoding for a third interface that displays the first message.

4. The method of claim 1, wherein the first message includes an indication of type or form of data unauthorized for transfer external to the home network environment.

5. The method of claim 1, further comprising:

logging packet transmissions received from a particular network device connected to the home network environment.

6. The method of claim 1, wherein the first message includes a network path indication of a source of the one or more first particular packets of the packet traffic.

7. The method of claim 1, wherein the first message includes an alphanumeric identifier of a source of the one or more first particular packets of the packet traffic.

8. The method of claim 1, further comprising:

receiving, by the television receiver, additional input corresponding to selection of the first item for deactivating the scanning service;

deactivating, by the television receiver, the scanning service;

receiving, by the television receiver, additional packets of traffic directed to systems external to the home network environment; and

routing, by the television receiver, the additional packets of packet traffic external to the home network environment.

9. The method of claim 1, further comprising:

receiving by the television receiver, at least one definition of data unauthorized for transfer external to the home network environment.

10. The method of claim 1, further comprising:

receiving, by the television receiver, at least one definition of data authorized for transfer external to the home network environment.

11. The method of claim 1, further comprising:

receiving, by the television receiver, additional input corresponding to selection of the second item for deactivating the notification service.

12. A television receiver, comprising:

at least one processor;

one or more audio/video decoders operable to convert encoded video and audio into a format suitable for output to display devices;

a network interface operable to establish network connections with systems in a home network environment and external to the home network environment;

an output interface operable to output audio and video signals for use by display devices; and

at least one memory element communicatively coupled with and readable by the at least one processor and having stored therein processor-readable instructions that, when executed by the at least one processor, cause the at least one processor to perform operations including;

receiving, at the network interface, packet traffic generated by network devices connected to the home network environment, wherein the network devices connected to the home network environment are different from the television receiver, and wherein the packet traffic is directed to systems external to the home network environment;

generating a first output signal encoding for a first interface that includes a first item for activating or deactivating a scanning service for scanning contents of packets of the packet traffic to identify data unauthorized for transfer external to the home network environment;

receiving input corresponding to selection of the first item for activating the scanning service;

activating the scanning service;

generating a second output signal encoding for a second interface that includes a second item for activating or deactivating a notification service for generating messages indicating that transfers of data unauthorized for transfer external to the home network environment have been attempted;

receiving input corresponding to selection of the second item for activating the notification service;

activating the notification service;

scanning contents of packets of the packet traffic to identify data unauthorized for transfer external to the home network environment, wherein scanning includes scanning at least one of a header and a body of packets of the packet traffic to identify data unauthorized for transfer external to the home network environment;

determining that one or more first particular packets of the packet traffic include first data unauthorized for transfer external to the home network environment;

blocking the one or more first particular packets of the packet traffic that include the first data from being routed external to the home network environment;

generating a first message indicating that a first transfer of data unauthorized for transfer external to the home network environment has been attempted, wherein the first message includes a first option that, when activated, generates a first command to retain in memory a first action to implement upon subsequent identification of the first data, wherein the first action corresponds to blocking additional packets of packet traffic that include the first data;

sending the first message to a display device for display thereon, wherein sending the first message includes sending the first message to the display device for display as part of an electronic programming guide;

receiving input corresponding to activation of the first option;

determining that one or more second particular packets of the packet traffic include the first data unauthorized for transfer external to the home network environment;

blocking the one or more second packets of the packet traffic from being routed external to the home network environment based on the first command retained in memory;

determining that one or more third particular packets of the packet traffic include second data unauthorized for transfer external to the home network environment, wherein the second data is different from the first data;

generating a second message indicating that a second transfer of data unauthorized for transfer external to the home network environment has been attempted, wherein the second message includes a second option that, when activated, generates a second command to retain in memory a second action to implement upon subsequent identification of the second data, wherein the second action corresponds to ignoring additional packets of packet traffic that include the second data;

sending the second message to the display device for display thereon;

receiving input corresponding to activation of the second option;

routing the one or more third particular packets of the packet traffic external to the home network environment; and

routing other packets of the packet traffic to systems external to the home network environment.

13. The television receiver of claim 12, wherein the operations further include:

identifying a particular network device connected to the home network environment as a source of the one or more first particular packets of the packet traffic that include the first data; and

blocking additional packets of the packet traffic originating from the particular network device from transfer external to the home network environment.

14. The television receiver of claim 12, wherein sending the first message includes transmitting the first message by email, transmitting the first message to a mobile application, sending the first message by text message, or generating a third output signal encoding for a third interface that displays the first message.

15. The television receiver of claim 12, wherein the first message includes an indication of type or form of data unauthorized for transfer external to the home network environment.

16. The television receiver of claim 12, wherein the operations further include:

logging packet transmissions received from a particular network device connected to the home network environment.

17. The television receiver of claim 12, wherein the first message includes a network path indication of a source of the one or more first particular packets of the packet traffic.

18. The television receiver of claim 12, wherein the message includes an alphanumeric identifier of a source of the one or more first particular packets of the packet traffic.

19. The television receiver of claim 12, wherein the operations further include:

receiving additional input corresponding to selection of the first item for deactivating the scanning service;

deactivating the scanning service;

receiving additional packets of packet traffic directed to systems external to the home network environment; and

routing the additional packets of packet traffic external to the home network environment.

20. A non-transitory computer readable medium comprising instructions that, when executed by one or more processors of a television receiver, cause the one or more processors to perform operations including:

receiving packet traffic generated by network devices connected to a home network environment, wherein the network devices connected to the home network environment are different from the television receiver, and wherein the packet traffic is directed to systems external to the home network environment;

generating a first output signal encoding for a first interface that includes a first item for activating or deactivating a scanning service for scanning contents of packets of the packet traffic to identify data unauthorized for transfer external to the home network environment;

receiving input corresponding to selection of the first item for activating the scanning service;

activating the scanning service;

generating a second output signal encoding for a second interface that includes a second item for activating or deactivating a notification service for generating messages indicating that transfers of data unauthorized for transfer external to the home network environment have been attempted;

receiving input corresponding to selection of the second item for activating the notification service;

activating the notification service;

scanning at least one of a header and a body of packets of the packet traffic to identify data unauthorized for transfer external to the home network environment;

identifying that one or more first particular packets of the packet traffic include first data unauthorized for transfer external to the home network environment;

blocking the one or more first particular packets of the packet traffic that include the first data from being routed external to the home network environment;

generating a first message indicating that a first transfer of data unauthorized for transfer external to the home network environment has been attempted, wherein the first message includes a first option that, when activated, generates a first command to retain in memory a first action to implement upon subsequent identification of the first data, wherein the first action corresponds to blocking additional packets of packet traffic that include the first data;

sending the first message to a display device for display thereon;

receiving input corresponding to activation of the first option;

identifying that one or more second particular packets of the packet traffic include second data unauthorized for transfer external to the home network environment;

blocking the one or more second particular packets of the packet traffic from being routed external to the home network environment based on the first command retained in memory;

identifying that one or more third particular packets of the packet traffic include second data unauthorized for transfer external to the home network environment, wherein the second data is different from the first data;

generating a second message indicating that a second transfer of data unauthorized for transfer external to the home network environment has been attempted, wherein the second message includes a second option that, when activated, generates a second command to retain in memory a second action to implement upon subsequent identification of the second data, wherein the second action corresponds to ignoring additional packets of data that include the second data;

sending the second message to the display device for display thereon;

receiving input corresponding to activation of the second option;

routing the one or more third particular packets of the packet traffic external to the home network environment; and

routing other packets of the packet traffic to systems external to the home network environment.