Multimedia network system with content importation, content exportation, and integrated content management

• US 9,805,174 B2
• Filed: 02/26/2016
• Issued: 10/31/2017
• Est. Priority Date: 05/19/2004
• Status: Active Grant

• Current Assignee: Digital Media Technologies, Inc.
• Original Assignee: Digital Media Technologies, Inc.
• Inventors: Drope, Philip
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): ASEFA, DEBEBE A
• Application Number:
  US15/054,198
• Publication Number:
  US 20160171189A1
• Time in Patent Office: 613 Days
• CPC Class Codes: G06F 16/40 of multimedia data, e.g. slideshows comprising image and additional audio data retrieval of still image data G06F16/50; retrieval of audio data G06F16/60; retrieval of video data G06F16/70
• CPC Class Codes: G06F 21/1062 Editing
• CPC Class Codes: G06F 21/1075 Editing
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04N 21/2181 comprising remotely distributed storage units, e.g. when movies are replicated over a plurality of video servers distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS], H04L67/1097
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/25841 involving the geographical location of the client retrieval from the Internet by querying based on geographical locations G06F16/9537; arrangements for identifying locations of receiving stations in broadcast systems H04H60/51; location of the user terminal in data switching networks H04L67/52; services making use of the location of users or terminals in wireless networks H04W4/02; locating users or terminals in wireless networks H04W64/00
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/2747 Remote storage of video programs received via the downstream path, e.g. from the server
• CPC Class Codes: H04N 21/41407 embedded in a portable device, e.g. video client on a mobile phone, PDA, laptop constructional details of equipment or arrangements specially adapted for portable computer application G06F1/1626; arrangements specially adapted for mobile receivers in broadcast systems H04H20/57
• CPC Class Codes: H04N 21/4227 : Providing Remote input by a user located remotely from the client device, e.g. at work
• CPC Class Codes: H04N 21/4402 : involving reformatting operations of video signals for household redistribution, storage or real-time display details of conversion of video standards at pixel level H04N7/01; video transcoding H04N19/40; adapting incoming signals to the display format of the display terminal G09G5/005; media handling at the source in data packet switching networks H04L65/764
• CPC Class Codes: H04N 21/4408 : involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4415 : using biometric characteristics of the user, e.g. by voice recognition or fingerprint scanning cryptography using biological data H04L9/3231; authentication in networks using biometric H04L63/0861
• CPC Class Codes: H04N 21/4882 : for displaying messages, e.g. warnings, reminders arrangements for providing short real-time information to substation in data switching networks H04L12/1895
• CPC Class Codes: H04N 21/6125 : involving transmission via Internet transmission by internet of broadcast information H04H60/82
• CPC Class Codes: H04N 21/6175 : involving transmission via Internet broadcast-related systems characterised by the transmission system being the Internet H04H60/82
• CPC Class Codes: H04N 21/63345 : by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/63775 : for uploading keys, e.g. for a client to communicate its public key to the server key management H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/84 : Generation or processing of descriptive data, e.g. content descriptors systems specially adapted for using meta-information in broadcast systems H04H60/73
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

This system provides wired and/or wireless access throughout a multimedia network built on a distributed architecture which can be transparent to the user. This multimedia network includes content which is imported or generated within the network. The system allows for the content provider to determine the license status of content and update the license status of content which was previously provided by that provider. The external content can be accessed in real time or downloaded and stored within the system for later access at the convenience of the user. The usage of some content is controlled by the use of encryption and other protection methods. The system allows for storage of live video by storing the digitized video and allowing the user to control how, when and where the content is viewed. The system makes available multiple multimedia services to all users in the network or connected via the internet.

Claims

1. A multimedia system, comprising:

at least one control server device, having circuitry, configured to receive a first request for content from at least one client device via a network;

at least one content server device, having circuitry, configured to send the content to the at least one client device via the network; and

at least one license server device, having circuitry, configured to;

receive a second request from the at least one client device for a content license, via the network, the content license comprising a decryption key and content usage parameters, the decryption key being an input parameter of a decryption algorithm associated with the content, the second request being based upon a determination by the at least one client device that the content is protected and requires a content license, the second request further comprising a public key associated with the at least one client device;

receive information from the at least one client device via the network, the information comprising a user authorization and a device authorization, wherein the device authorization corresponds to a security rating of the at least one client device, the security rating of the at least one client device being based on security specifications of software and hardware of the at least one client device;

evaluate the information according to at least one predetermined criterion specified by the content provider;

automatically encrypt the content license with the public key; and

send, after being encrypted using the public key, the content license to the at least one client device via the network.

2. The multimedia system of claim 1, wherein the first request for content is selected on the at least one client device, via an interactive program guide, utilizing a graphical user interface, which is configured to display the content available in a consolidated format, where some content available may be found by using a search function requested via the at least one client device.

3. The multimedia system of claim 1, wherein the decryption algorithm comprises at least one additional input parameter, the at least one additional input parameter being at least one of:

a content identifier, a serial number associated with one or more hardware components of the at least one client device, a hardware identifier associated with the one or more hardware components of the at least one client device, a key seed, a timestamp, a media access control address associated with a network adapter of the at least one client device, a globally unique identifier associated with the at least one client device, a key identifier associated with the content license, a session key, a token, a content key, another key, or a security certificate.

4. The multimedia system of claim 1, wherein the at least one client device contains a secure system clock configured to prevent altering of system time by the user.

5. The multimedia system of claim 4, wherein the at least one client device has access to at least one enhanced capability after a confirmation of the presence of the secure system clock.

6. The multimedia system of claim 1, wherein the at least one client device contains a security algorithm which uses data within at least one of:

the software or the hardware, for use in determination of the user authorization and the device authorization.

7. The multimedia system of claim 1, wherein the at least one client device uses a security algorithm with data from at least one of:

the software or the hardware, of the at least one client device, to derive information used to implement the content usage parameters.

8. The multimedia system of claim 1, wherein at least one security certificate is used for communication of information related to the at least one of:

content key, a session key, a token, content usage parameters, a user authorization, device authorization, status of content previously sent, content owned or purchased by user, or a status of the content requested.

9. The multimedia system of claim 1, wherein the content license comprises at least one content key and at least one content usage parameter.

10. The multimedia system of claim 1, wherein at least one content key is embedded with the content.

11. The multimedia system of claim 1, wherein at least one content usage parameter is embedded with the content.

12. The multimedia system of claim 1, wherein at least one communication between the at least one client device and the license server is encrypted.

13. The multimedia system of claim 12, wherein the at least one communication is encrypted via an asymmetrical encryption.

14. The multimedia system of claim 13, wherein the asymmetrical encryption employs a public key/private key encryption.

15. The multimedia system of claim 1, wherein the at least one client device is at least one of:

a game console, a digital video recorder, a television, a satellite television receiver, a cable television receiver, a digital camera, a computer, a content storage device, a radio receiver, a telephony device, an optical storage device, a set-top box, or a digital media player.

16. The multimedia system of claim 1, wherein the user authorization specifies at least one of:

information related to content previously sent to the user, user subscription information, information related to user authorization for additional content, or at least one user permission related to content access.

17. The multimedia system of claim 1, wherein the device authorization specifies at least one of:

the at least one client device has a proper security rating and is registered to a valid user domain, the at least one client device has a proper security rating and contains a secure system clock, or the at least one client device has a proper security rating and is registered to the user.

18. The multimedia system of claim 1, wherein the content is at least one of:

data, audio, or video.

19. The multimedia system of claim 1, wherein the at least one client device comprises a computing device and a software executable configured to graphically display the content.

20. The multimedia system of claim 1, wherein the at least one client device comprises a computing device configured to store content, the content being transmitted via a network, from a source located at least one of:

locally or remotely.

21. The multimedia system of claim 20, wherein the computing device is configured to store the content license, the content license being transmitted via a network, from a source located at least one of:

locally or remotely.

22. The multimedia system of claim 21, wherein the computing device is further configured to allow detachment from the network.

23. The multimedia system of claim 22, wherein the computing device is further configured to allow content usage based at least upon at least one usage parameter while detached from the network.

24. The multimedia system of claim 1, wherein a content provider updates data within at least one of:

the software and the hardware, of the at least one client device.

25. The multimedia system of claim 24, wherein the content provider sends the data to update the public/private key pair associated with the at least one client device.

26. The multimedia system of claim 25, wherein the at least one client device uses at least one algorithm to calculate at least one public/private key pair for the at least one client device based upon at least one of:

a time that data is sent from the content provider, a predetermined schedule, or at least one security requirement.

27. The multimedia system of claim 1, wherein the content further comprises at least one of:

content that is purchased by a user, content that is rented by the user, or content that is part of a subscription associated with the user.

28. The multimedia system of claim 1, wherein the control server is further configured to authorize a user with data received from the at least one client device, the data comprising at least one of:

radio frequency identification information related to the user, alphanumeric information related to the user, combined alphanumeric and password information related to the user, or biometric information related to the user.

29. The multimedia system of claim 1, wherein the video is previously recorded video.

30. The multimedia system of claim 1, wherein the video is at least one of:

a movie or a television program.

31. The multimedia system of claim 1, wherein the decryption key is a content key which the client uses to decrypt the content.

32. The multimedia system of claim 1, wherein at least one communication between the at least one client device and the content server is encrypted.

33. The multimedia system of claim 32, wherein the content is encrypted via a symmetrical encryption.

34. The multimedia system of claim 1, wherein the network is a wide area network.

35. The multimedia system of claim 1, wherein the at least one control server device is further configured to authenticate a user with data received from the at least one client device, the data comprising at least one of:

a radio frequency identification device, alphanumeric input received from a user, alphanumeric and password input received from a user, or biometric information related to a user.

36. A method, comprising:

receiving, in at least one control server, a first request for content from at least one client device via a network;

transmitting, by the at least one content server, the content to the at least one client device via the network;

receiving, in the at least one license server, a second request for a content license from the at least one client device via the network, the content license comprising a decryption key and content usage parameters, the decryption key being an input parameter for a decryption algorithm associated with the content, the second request being based upon a determination by the at least one client device that the content is protected and requires a content license, the second request further comprising a public key associated with the at least one client device;

receiving, in the at least one license server, information from the at least one client device via the network, the information comprising a user authorization and a device authorization, wherein the device authorization corresponds to a security rating of the at least one client device, the security rating of the at least one client device being based on security specifications of software and hardware of the at least one client device;

evaluating, in the at least one license server, the information according to predetermined criteria specified by the content provider;

encrypting, in the at least one license server, the content license with a public key associated with the at least one client device;

transmitting, by the at least one license server, the encrypted content license to the at least one client device via the network;

decrypting, in the at least one client device, the content license using a private key associated with the at least one client device;

decrypting, in the at least one client device, the content using the at least one decryption key as at least one input parameter for a decryption algorithm; and

using the content according to content usage parameters contained in the content license.

37. The method of claim 36, wherein the first request for content being selected on the at least one client device, via an interactive program guide, utilizing a graphical user interface, which is configured to display the content available in a consolidated format, where some content available may be found by using a search function requested via the at least one client device.

38. The method of claim 36, wherein the decryption algorithm comprises at least one of:

a content identifier, a serial number associated with one or more hardware components of the at least one client device, a hardware identifier associated with the one or more hardware components of the at least one client device, a key seed, a timestamp, a media access control address associated with a network adapter of the at least one client device, a globally unique identifier associated with the at least one client device, a key identifier associated with the content license, a session key, a token, a content key, another key, or a security certificate.

39. The method of claim 36, wherein the at least one client device contains a secure system clock configured to prevent altering of system time by the user.

40. The method of claim 39, wherein the at least one client device has access to at least one enhanced capability after a confirmation of the presence of the secure system clock.

41. The method of claim 36, wherein the at least one client device contains a security algorithm which uses data within at least one of:

the software or the hardware, for use in determination of the user authorization and the device authorization.

42. The method of claim 36, wherein the at least one client device uses a security algorithm with data from at least one of:

the software or the hardware, of the at least one client device, to derive information used to implement the content usage parameters.

43. The method of claim 36, wherein at least one security certificate is used for communication of information related to the at least one of:

content key, a session key, a token, content usage parameters, a user authorization, device authorization, status of content previously sent, content owned or purchased by user, or a status of the content requested.

44. The method of claim 36, wherein at least one content key is embedded with the content.

45. The method of claim 36, wherein at least one content usage parameter is embedded with the content.

46. The method of claim 36, wherein the decryption key is a content key which the at least one client device uses to decrypt the content.

47. The method of claim 36, wherein the content further comprises at least one of:

content that is purchased by a user, content that is rented by the user, or content that is part of a subscription associated with the user.

48. The method of claim 36, wherein the at least one client device is at least one of:

a game console, a digital video recorder, a television, a satellite television receiver, a cable television receiver, a digital camera, a computer, a content storage device, a radio receiver, a telephony device, an optical storage device, a set-top box, or a digital media player.

49. The method of claim 36, wherein the user authorization specifies at least one of:

user subscription information, information related to content previously sent to the user, information related to user authorization for additional content, or at least one user permission related to content access.

50. The method of claim 36, wherein the device authorization specifies at least one of:

the at least one client device has a proper security rating and is registered to a valid user domain, the at least one client device has a proper security rating and contains a secure system clock, or the at least one client device has a proper security rating and is registered to the user.

51. The method of claim 36, wherein the network is a wide area network.

52. The method of claim 36, wherein the at least one control server device is further configured to authenticate a user with data received from the at least one client device, the data comprising at least one of:

a radio frequency identification device, alphanumeric input received from a user, alphanumeric and password input received from a user, or biometric information related to a user.