Controlled environment secure media streaming system

• US 9,930,042 B2
• Filed: 05/12/2017
• Issued: 03/27/2018
• Est. Priority Date: 03/15/2016
• Status: Active Grant

• Current Assignee: Global Tel-Link Corporation
• Original Assignee: Global Tel-Link Corporation
• Inventors: Hodge, Stephen Lee
• Primary Examiner(s): Mehrmanesh, Amir
• Application Number:
  US15/593,970
• Publication Number:
  US 20170272440A1
• Time in Patent Office: 319 Days
• Field of Search: None
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/1064 Restricting content processing at operating system level
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 30/0613 Third-party assisted
• CPC Class Codes: G06Q 50/26 Government or public services business processes related to the transportation industry G06Q50/40
• CPC Class Codes: H04L 2463/103 applying security measure for protecting copy right protecting software against unauthorised usage in a vending or licensing environment, e.g. protection the software providers copyright G06F21/10; data processing systems or methods, specially adapted for payment schemes, architectures or protocols G06Q20/00; secrecy systems or subscription systems H04N7/16
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 65/60 Network streaming of media packets
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

A Controlled Environment Secure Media Streaming System manages the delivery of content to Secured Devices. Cloud Services provide content to Integration Hub. The Integration Hub interfaces with various cloud services providers and prepares content for consumption by a resident of a secured facility. Integration Hub utilizes Content Filter to inspect content received from cloud service providers for suitability for use in a secured environment. Once content is retrieved, filtered, formatted, and packaged by Integration Hub, the content is stored in Data Warehouse. Secured Devices request content from the Distribution Hub, the Distribution Hub retrieves the content from the Data Warehouse, and then Distribution Flub manages the transfer of content to the Secured Devices. In some embodiments, Distribution Hub utilizes Content Filter to determine whether or not a particular Secured Device can access particular content.

Claims

1. A distribution hub within a secure media streaming system for an access controlled environment including a plurality of secured facilities, the plurality of secured facilities including a plurality of secured devices, the distribution hub comprising:

a first processor configured to execute a connection manager, the connection manager, when executed by the first processor, configuring the first processor to receive a request to access a unit of content of a service provider from a secured device within a secured facility of the access controlled environment from among the plurality of secured devices, the access controlled environment being configured to provide a restriction on physical entry thereto or physical exit therefrom; and

a second processor configured to execute an access restriction manager, the access restriction manager, when executed by the second processor, configuring the second processor to;

receive a facility-level-censored unit of content in response to the request, the unit of content being censored for a first type of content that is not suitable for use in the secured facility to provide the facility-level-censored unit of content, the first type of content being associated with a first content access restriction for restricting access of the secured facility to the first type of content,

analyze the unit of content for a second type of content that is not suitable to be accessed by the secured device, the second type of content being associated with a second content access restriction for restricting access of the secured device to the second type of content, and

censor the second type of content that is not suitable to be accessed by the secured device from the facility-level-censored unit of content in accordance with the second content access restriction to provide a device-level-censored unit of content.

2. The distribution hub of claim 1, wherein the access restriction manager, when executed by the second processor, further configures the second processor to restrict usage of the device-level-censored unit of content to a time of day, a day of week, or a location within the secured facility in accordance with a usage restriction.

3. The distribution hub of claim 1, wherein the access restriction manager, when executed by the second processor, further configures the second processor to deliver the device-level-censored unit of content to the secured device.

4. The distribution hub of claim 3, further comprising:

a third processor configured to execute a reporting services application, the reporting services application, when executed by the third processor configuring the third processor to calculate a royalty payment associated with the unit of content to be paid to the service provider; and

a fourth processor configured to execute a payment application, the payment Application, when executed by the fourth processor configuring the fourth processor to deduct the royalty payment from a monetary account associated with a user of the secured device.

5. The distribution hub of claim 4, wherein the monetary account comprises:

a Debit Account;

or

an Advance Pay Account.

6. The distribution hub of claim 4, wherein the reporting services application, when executed by the third processor, further configures the third processor to report delivery of the device-level-censored unit of content to the service provider.

7. The distribution hub of claim 1, wherein the unit of content comprises:

music, a video, a television show, a movie, a digital book, a digital magazine, a game, or a software application.

8. The distribution hub of claim 1, wherein the unit of content has been converted from a first format incompatible with the secured device to a second format compatible with the secured device in accordance with a conversion algorithm from among a plurality of conversion algorithms.

9. A method for operating a secure media streaming system for an access controlled environment including a plurality of secured facilities, the plurality of secured facilities including a plurality of secured devices, the method comprising:

receiving, by a first processor executing a connection manager, a request to access a unit of content of a service provider from a secured device within a secured facility of the access controlled environment from among the plurality of secured devices, the access controlled environment providing a restriction on physical entry thereto or physical exit therefrom;

receiving, by a second processor executing an access restriction manager, a facility-level-censored unit of content in response to the request, the unit of content being censored for a first type of content that is not suitable for use in the secured facility to provide the facility-level-censored unit of content, the first type of content being associated with a first content access restriction for restricting access of the secured facility to the first type of content;

analyzing, by the second processor executing the access restriction manager, the unit of content for a second type of content that is not suitable to be accessed by the secured device, the second type of content being associated with a second content access restriction for restricting access of the secured device to the second type of content; and

censoring, by the second processor executing the access restriction manager, the second type of content that is not suitable to be accessed by the secured device from the facility-level-censored unit of content in accordance with the second content access restriction to provide a device-level-censored unit of content.

10. The method of claim 9, further comprising:

restricting, by the second processor executing the access restriction manager, usage of the device-level-censored unit of content to a time of day, a day of week, or a location within the secured facility in accordance with a usage restriction.

11. The method of claim 9, further comprising:

delivering, by the second processor executing the access restriction manager, the device-level-censored unit of content to the secured device.

12. The method of claim 11, further comprising:

calculating, by a third processor executing a payment application, a royalty payment associated with the unit of content to be paid to the service provider; and

deducting, by the third processor executing the payment application, the royalty payment from a monetary account associated with a user of the secured device.

13. The method of claim 12, wherein the monetary account comprises:

a Debit Account;

or

an Advance Pay Account.

14. The method of claim 11, further comprising:

reporting, by the second processor executing the access restriction manager, delivery of the device-level-censored unit of content to the service provider.

15. The method of claim 9, wherein the unit of content, comprises:

music, a video, a television show, a movie, a digital book, a digital magazine, a game, or a software application.

16. The method of claim 9, wherein the unit of content has been converted from a first format incompatible with the secured device to a second format compatible with the secured device in accordance with a conversion algorithm from among a plurality of conversion algorithms.

17. A distribution hub within a secure media streaming system for an access controlled environment including a plurality of secured facilities, the plurality of secured facilities including a plurality of secured devices, the distribution hub comprising:

a first processor configured to execute an access restriction manager, the access restriction manager, when executed by the first processor, configuring the first processor to;

receive a facility-level-censored unit of content in response to a request to access a unit of content from a service provider for delivery to a secured device within a secured facility of the access controlled environment from among the plurality of secured devices, wherein the access controlled environment is configured to provide a restriction on physical entry thereto or physical exit therefrom, wherein the unit of content is censored for a first type of content that is not suitable for use in the secured facility to provide the facility-level-censored unit of content, and wherein the first type of content is associated with a first content access restriction for restricting access of the secured facility to the first type of content,

analyze the unit of content for a second type of content that is not suitable to be accessed by the secured device, the second type of content being associated with a second content access restriction for restricting access of the secured device to the second type of content, and

censor the second type of content that is not suitable to be accessed by the secured device from the facility-level-censored unit of content in accordance with the second content access restriction to provide a device-level-censored unit of content; and

a second processor configured to execute a payment application, the payment application, when executed by the second processor, configuring the second processor to deduct a royalty payment associated with the unit of content to be paid to the service provider from a monetary account associated with a user of the secured device.

18. The distribution hub of claim 17, wherein the access restriction manager, when executed by the first processor, further configures the first processor to restrict usage of the device-level-censored unit of content to a time of day, a day of week, or a location within the secured facility in accordance with a usage restriction.

19. The distribution hub of claim 18, wherein the access restriction manager, when executed by the second processor, further configures the second processor to deliver the device-level-censored unit, of content to the secured device.

20. The distribution hub of claim 19, further comprising:

a third processor, configured to execute a reporting services application, the reporting services application, when executed by the third processor, configuring the third Processor to report delivery of the device-level-censored unit of content to the service provider.

21. The distribution hub of claim 17, further comprising:

a third processor, configured to execute a reporting services application, the reporting services application, when executed by the third processor, configuring the third processor to calculate the royalty payment.

22. The distribution hub of claim 17, wherein the monetary account comprises:

a Debit Account;

or

an Advance Pay Account.

23. The distribution hub of claim 17, wherein the unit of content comprises:

music, a video, a television show, a movie, a digital book, a digital magazine, a game, or a software application.

24. The distribution hub of claim 17, wherein the unit of content has been converted from a first format incompatible with the secured device to a second format compatible with the secured device in accordance with a conversion algorithm from among a plurality of conversion algorithms.

25. A method for operating a secure media streaming system for an access controlled environment including a plurality of secured facilities, the plurality of secured facilities including a plurality of secured devices, the method comprising:

receiving, by a first processor executing an access restriction manager, a facility-level-censored unit of content in response to a request to access a unit of content from a service provider for delivery to a secured device within a secured facility from among the plurality of secured devices, wherein the access controlled environment is configured to provide a restriction on physical entry thereto or physical exit therefrom, wherein the unit of content is censored for a first type of content that is not, suitable for use in the secured facility to provide the facility-level-censored unit of content, and wherein the first type of content is associated with a first content access restriction for restricting access of the secured facility to the first type of content;

analyzing, by the first processor executing the access restriction manager, the unit of content for a second type of content that is not suitable to be accessed by the secured device, the second type of content being associated with a second content access restriction for restricting access of the secured device to the second type of content;

censoring, by the first processor executing the access restriction manager, the second type of content that is not suitable to be accessed by the secured device from the facility-level-censored unit of content in accordance with the second content access restriction to provide a device-level-censored unit of content; and

deducting, by a second processor executing a payment application, a royalty payment associated with the unit of content to be paid to the service provider from a monetary account associated with a user of the secured device.

26. The method of claim 25, further comprising:

restricting, by the first processor executing the access restriction manager, usage of the device-level-censored unit of content to a time of day, a day of week, or a location within the secured facility in accordance with a usage restriction.

27. The method of claim 26, further comprising:

delivering, by the first processor executing the access restriction manager, the device-level-censored unit of content to the secured device.

28. The method of claim 27, further comprising:

reporting, by the first processor executing the access restriction manager, delivery of the device-level-censored unit of content to the service provider.

29. The method of claim 25, wherein the monetary account comprises:

a Debit Account;

or

an Advance Pay Account.

30. The method of claim 25, wherein the unit of content has been converted from a first format incompatible with the secured device to a second format compatible with the secured device in accordance with a conversion algorithm from among a plurality of conversion algorithms.