Systems and methods for providing secure services

• US 9,942,213 B2
• Filed: 11/13/2013
• Issued: 04/10/2018
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Comcast Cable Communications LLC (Comcast Corporation)
• Original Assignee: Comcast Cable Communications LLC (Comcast Corporation)
• Inventors: de Andrade, David, Ladd, Patrick, Brzozowski, John, Leddy, John
• Primary Examiner(s): Homayounmehr, Farid
• Assistant Examiner(s): Le, Thanh T
• Application Number:
  US14/079,174
• Publication Number:
  US 20140281533A1
• Time in Patent Office: 1,609 Days
• Field of Search: 173168
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

Systems and methods for providing one or more secure services are disclosed. One method can comprise authenticating and/or authorizing a user device to receive a security token. A request for information can be processed using the security token to facilitate the secure provision of services to the user device.

Claims

1. A method comprising;

authenticating a first device;

providing an authorization element based upon the authentication of the first device;

authorizing the first device using the authorization element;

providing a security token to the first device based upon the authorization of the first device, wherein the first device is within a first network and the security token is received by the first device from a second network external to the first network; and

providing the security token to a second device, wherein the second device is within the first network, and wherein the second device receives a request for information from the first device via the first network, the request for information comprising an unencrypted data field and an encrypted data field, and wherein the encrypted data field is encrypted using the security token such that the second device will authenticate the request for information using the security token.

2. The method of claim 1, wherein authenticating the first device comprises using a public key infrastructure protocol.

3. The method of claim 1, wherein the security token is associated with an addressable identifier.

4. The method of claim 1, wherein the security token comprises a renewable security token.

5. The method of claim 1, wherein the second device comprises a content gateway.

6. The method of claim 1, wherein the encrypted data field comprises an encrypted state of the unencrypted data field.

7. The method of claim 1, the first network comprises a local area network.

8. A method comprising;

receiving, at a first device in a first network, a request for information comprising an encrypted data field and an unencrypted data field, wherein the request for information is from a second device in the first network;

receiving, at the first device, a security token from a second network external to the first network;

decrypting the encrypted data field using the security token, wherein the encrypted data field relates to one or more available services;

comparing the decrypted data field and the unencrypted data field; and

if the decrypted data field matches the unencrypted data field, providing access to the one or more available services to the second device.

9. The method of claim 8, wherein the security token comprises a renewable security token.

10. The method of claim 8, wherein the encrypted data field comprises the encrypted state of the unencrypted data field.

11. The method of claim 8, wherein one or more of the encrypted data field or the unencrypted data field comprises a time stamp.

12. The method of claim 8, wherein the second device comprises an authorized device.

13. The method of claim 8, wherein the one or more available services comprises a secure service.

14. The method of claim 8, wherein the first device comprises a content gateway.

15. A method comprising:

receiving, at a first device in a first network, a security token from a second device in a second network external to the first network based on authentication of user credentials received at the first device;

generating, at the first device, a request for a service comprising a first unencrypted portion and a second portion encrypted based on the security token;

providing, via the first network, the request for the service to a third device in the first network, wherein the third device is configured to authenticate the request by comparing a result of decrypting the second portion to the first unencrypted portion;

receiving, at the first device, access to the service in response to the third device authenticating the request; and

providing the service to a user device in response to receiving access to the service.

16. The method of claim 15, wherein the request is processed by the second device independent of manufacturer credentials associated with the first device.

17. The method of claim 15, wherein the security token comprises a renewable security token having a predetermined time duration before expiration.

18. The method of claim 15, wherein the service is advertised, via encrypted availability information, in the first network, and wherein the first network is a local area network, and further comprising decrypting the encrypted availability information based on the security token.

19. The method of claim 15, wherein the first network comprises a local area network.

20. The method of claim 15, wherein the service comprises a video service, and wherein the second portion comprises the first unencrypted portion encrypted based on the security token.