Method and system for assigning information contents

• US 9,682,778 B2
• Filed: 08/29/2012
• Issued: 06/20/2017
• Est. Priority Date: 08/29/2012
• Status: Active Grant

• Current Assignee: Bull Sas (Atos SE)
• Original Assignee: Siemens Convergence Creators GmbH (Atos SE)
• Inventors: Schreiber, Gerald
• Primary Examiner(s): Hoffman, Brandon
• Assistant Examiner(s): Woldemariam, Nega
• Application Number:
  US14/423,160
• Publication Number:
  US 20150244683A1
• Time in Patent Office: 1,756 Days
• CPC Class Codes: B64D 11/0015 Arrangements for entertainment or communications, e.g. radio, television
• CPC Class Codes: B64D 11/00155 Individual entertainment or communication system remote controls therefor, located in or connected to seat components, e.g. to seat back or arm rest
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04N 21/2146 located in mass transportation means, e.g. aircraft, train or bus flight-deck installations for entertainment or communications B64D11/0015; arrangements specially adapted for transportation systems in broadcast systems H04H20/62; moving wireless networks H04W84/005
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06

Abstract

A method and system is provided, including an on-board server, by which, a link to the output unit is set up, and is assigned to a specific conveying means via a first key pair. A first secret key from the first key pair is stored on the on-board server. Before the use of the conveying means, an application is installed on the output unit and a second key pair is requested, a second secret key being transmitted to the application. Then, available information contents are displayed on the output unit, and a unique code is generated for each selected content. The selected contents are requested by the application and the unique code is assigned a third key pair. A third secret key is encrypted with the public keys and assigned to the on-board server. The selected contents, encrypted with a third public key, are then transmitted to the output unit.

Claims

1. A method for assigning information contents which, when a means of transportation is used, are displayed and consumed on a user-specific output unit, comprising:

assigning an on-board server to each means of transportation, via a first key pair, which includes a first secret key and a first public key, and the first secret key is stored on the on-board server;

before the means of transportation is used, installing an application on the user-specific output unit;

requesting, by the application, a second key pair with a second secret key and a second public key, and the second secret key is transmitted to the application, the second key uniquely assigned to a passenger on the means of transportation, the passenger associated with the user-specific output unit, wherein an identity of the passenger is known to an operator of the means of transportation;

displaying, by the application, available information contents that the passenger desires to consume during an impending use of the mean of transportation, and then a unique identification is created for each selected information content, wherein the passenger is assigned to the unique identification;

requesting, by the application by means of the unique identification, the selected information, and in this process the unique identification is assigned a third key pair with a third secret key and a third public key;

encrypting the third secret key with the first public key and the second public key, and is assigned to the on-board server of the means of transportation;

transmitting the selected information contents to the user-specific output unit outside the means of transportation, encrypted with the third public key; and

establishing a connection between the on-board server and the user-specific output unit within the means of transportation, wherein the on-board server requests the third secret key necessary for decrypting the information contents selected for playback by the user-specific output unit, and decrypts the third secret key.

2. The method as claimed in claim 1, wherein, when the means of transportation is used, a connection is established from the user-specific output unit to the on-board server, that, before the on-board server plays back the selected information content, the third secret key is decrypted with the first secret key and is then transmitted to the application on the user-specific output unit, that then on the user-specific output unit the third secret key is decrypted with the second secret key, and that the selected information content is then decrypted by the application with the third secret key and displayed.

3. The method as claimed in claim 1, wherein an assignment between the on-board server, the user-specific output unit, the selected information contents and/or the first, second and third key pair is stored in an inventory database.

4. The method as claimed in one of claim 1, wherein, after installation of the application and a transmission of the second secret key to the application an information data record about a use of the means of transportation is transferred.

5. The method as claimed in claim 1, wherein the key pairs are created by a key server.

6. The method as claimed in claim 1, wherein the first and the second public keys of the first and second key pairs are stored in a key database.

7. The method as claimed in claim 1, wherein after exit from the means of transportation the secret keys as well as all selected information contents are deleted by the user-specific output unit.

8. The method as claimed in claim 1, wherein the unique identification is issued for each selected information content by a catalog server.

9. The method as claimed in claim 1, wherein the third key pair is created at the time that an information content is selected.

10. The method as claimed in claim 1, wherein a number of third key pairs are generated in advance and these third key pairs are transmitted to the on-board server.

11. The method as claimed claim 1, wherein the selected information contents are marked during an encryption.

12. The method as claimed in claim 1, wherein the means of transportation is an aircraft.

13. A system comprising:

an on-board server for setting up a connection with a user-specific output unit within a means of transportation;

an application, which is installed on the user-specific output unit;

a key server and a key database for creation and storage of a plurality of key pairs, each of the plurality of key pairs including a secret key and a public key;

a catalog server for requesting an offering of available information contents and for issuing unique identifications for selected information contents;

an encryption server for encryption of the selected information contents;

an inventory database for storage of assignments between the on-board server, the user-specific output unit, the selected information contents and/or respective associated key pairs of the plurality of key pairs;

an information database for storage of available and selectable information contents; and

at least one communication network in each case for respective communication outside and inside the means of transportation;

wherein the selected information is requested by the application by means of the unique identification, and in this process the unique identification is assigned a third key pair with a third secret key and a third public key;

wherein the third secret key is encrypted with the first public key and the second public key, and is assigned to the on-board server of the means of transportation;

wherein the on-board server requests the third secret key necessary for decrypting the information contents selected for playback by the user-specific output unit inside and decrypts the secret key necessary for decrypting the selected information contents inside the means of transportation.

14. The system as claimed in claim 13, wherein the key server, the catalog server and the encryption server are grouped on one server and/or key database, inventory database and information database are grouped in one database.

15. The system as claimed in claim 13, wherein the on-board server is a mobile unit.

16. The system as claimed in claim 13, wherein the on-board server a software module.

17. The system as claimed in claim 13, wherein the means of transportation is an aircraft.