Method, Apparatus, Computer Program, Data Storage Medium and Computer Program Product For Preventing Reception of Media Data From a Multicast Service by an Unauthorized Apparatus

• US 20090138719A1
• Filed: 01/15/2007
• Published: 05/28/2009
• Est. Priority Date: 01/20/2006
• Status: Active Grant

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Franz, Matthias
• Granted Patent: US 8,745,382 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: H04L 12/185 with management of multicast group membership
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/611 for multicast or broadcast systems for broadcast or conference H04L12/18; arrangements for broadcast or distribution combined with broadcast H04H20/00; arrangements for broadcast applications with a direct linkage to broadcast information or to broadcast space-time H04H60/00; selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS], H04W4/06
• CPC Class Codes: H04L 9/0836 using tree structure or hierarchical structure
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/41265 having a remote control device for bidirectional communication between the remote control device and client device unidirectional remote control device H04N21/42204
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/436 Interfacing a local distribution network, e.g. communicating with another STB or one or more peripheral devices inside the home
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/6405 Multicasting data broadcast and multicast in packet switching networks H04L12/18
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

The method for the transmission of media data from a multicast service by a first apparatus to a plurality of second apparatuses is suitable for preventing reception of the media data by an unauthorized second apparatus using a security process. A first apparatus is provided which can be used to provide the media data protected by a security process. A third apparatus is provided which can be used to perform the security process with the first apparatus, performance of the security process between the first apparatus and the third apparatus and, on the basis of this, interchange of at least security data between the first apparatus and the third apparatus in order to provide the media data. A second apparatus is selected which can be used to perform at least one reception process for receiving the media data. A first data transmission link is selected which can be used to couple the first apparatus and the second apparatus at least for the purpose of transmitting the media data. The provided media data is received using the second apparatus via the first data transmission link.

Claims

1-25. -25. (canceled)

26. A method for the transmission of media data as a multicast service to a plurality of second apparatuses, comprising:

providing a first apparatus to multicast the media data protected by a security process to the plurality of second apparatuses;

providing a third apparatus to initiate messages and exchange security data with the first apparatus for a security process that prevents an unauthorized second apparatus from receiving the media data;

selecting a chosen second apparatus from the plurality of second apparatuses to receive the media data;

selecting a first data transmission link to couple the first apparatus and the chosen second apparatus to transmit the media data;

receiving the media data at the chosen second apparatus via the first data transmission link.

27. The method as claimed in claim 26, further comprising:

selecting a second data transmission link to couple the third apparatus and the second apparatus; and

transmitting at least part of the security data from the third apparatus to the second apparatus.

28. The method as claimed in claim 26, wherein

a third data transmission link couples the first apparatus and the third apparatus, and

the security data is exchanged between the first apparatus and the third apparatus via the third data transmission link.

29. The method as claimed in claim 27, wherein

a third data transmission link couples the first apparatus and the third apparatus,

the security data is exchanged between the first apparatus and the third apparatus via the third data transmission link,

control data is transmitted via at least one of the first data transmission link, the second data transmission link, and the third data transmission link.

30. The method as claimed in claim 26, wherein the media data is streamed to the chosen second apparatus so that the media data is continuously processed by the second apparatus during transmission.

31. The method as claimed in claim 30, wherein the media data is displayed at the second apparatus during transmission.

32. The method as claimed in claim 26, wherein

the media data is downloaded as an electronic object by the chosen second apparatus, and

the media data is displayed at the chosen second apparatus only after the electronic object has been completely received.

33. The method as claimed in claim 27, wherein

a third data transmission link couples the first apparatus and the third apparatus,

the security data is exchanged between the first apparatus and the third apparatus via the third data transmission link,

the first apparatus is a server, and/or

the third apparatus is a mobile phone or smartcard, and/or

the second apparatus is a laptop, personal computer, personal digital assistant or mobile phone, and/or

the first data transmission link is a WLAN, DSL or UMTS connection, and/or

the second data transmission link is a Bluetooth, infrared, WLAN or cable connection, and/or

the third data transmission link is a WLAN, DSL or UMTS connection.

34. The method as claimed in claim 27, wherein

a third data transmission link couples the first apparatus and the third apparatus,

the security data is exchanged between the first apparatus and the third apparatus via the third data transmission link,

at least one of the first data transmission link, the second data transmission link, and the third data transmission link is selected by a user of the third apparatus or the chosen second apparatus.

35. The method as claimed in claim 27, wherein

a third data transmission link couples the first apparatus and the third apparatus,

the security data is exchanged between the first apparatus and the third apparatus via the third data transmission link, and

at least one of the first data transmission link, the second data transmission link, and the third data transmission link is a secure connection.

36. The method as claimed in claim 27, wherein

a third data transmission link couples the first apparatus and the third apparatus,

the security data is exchanged between the first apparatus and the third apparatus via the third data transmission link, and

the third apparatus provides a first parameter and/or the chosen second apparatus provides a second parameter for selecting at least one of the first data transmission link, the second data transmission link, and the third data transmission link.

37. The method as claimed in claim 26,

wherein the security process includes at least one of a registration process, an authentication process, an integrity process, and an encoding process.

38. The method as claimed in claim 26,

wherein the security data includes at least one of registration data, cryptographic data, and synchronization data.

39. The method as claimed in claim 26,

wherein the security data includes registration data, synchronization data, and a cryptographic key or digital signature.

40. The method as claimed in claim 26, wherein

receipt of at least a part the security data is required for authorized reception of the media data, and

the same part of the security data is transmitted to each second apparatus for authorized reception.

41. The method as claimed in claim 26, wherein the method is part of an multimedia broadcast/multicast service (MBMS) security architecture.

42. The method as claimed in claim 26, wherein the second apparatus and the third apparatus are part of a single local area network.

43. The method as claimed in claim 26, further comprising playing the media data with a visual and/or acoustic media data player.

44. The method as claimed in claim 26, wherein the third apparatus sends messages to the second apparatus.

45. The method as claimed in claim 26, wherein the third apparatus remotely controls the second apparatus.

46. The method as claimed in claim 26, wherein the third apparatus encodes the media data with an encryption and/or decryption process.

47. The method as claimed in claim 27, wherein,

a third data transmission link couples the first apparatus and the third apparatus,

the security data is exchanged between the first apparatus and the third apparatus via the third data transmission link, and

the first data transmission link, the second data transmission link and the third data transmission link are independent of one another.

48. A system transmit media data as a multicast service, comprising:

a first apparatus to multicast the media data to a plurality of second apparatuses;

a third apparatus to initiate messages and exchange security data with the first apparatus for a security process that prevents unauthorized second apparatuses from receiving the media data; and

a first data transmission link to couple the first apparatus and the second apparatuses, the first data transmission link being used to transmit the media data from the first apparatus to the second apparatus.

49. A computer readable storage medium storing a program which when executed on a computer causes the computer to execute a method for the transmission of media data as a multicast service to a plurality of second apparatuses, the method comprising:

providing a first apparatus to multicast the media data protected by a security process to the plurality of second apparatuses;

providing a third apparatus to initiate messages and exchange security data with the first apparatus for a security process that prevents an unauthorized second apparatus from receiving the media data;

selecting a chosen second apparatus from the plurality of second apparatuses to receive the media data;

selecting a first data transmission link which to couple the first apparatus and the chosen second apparatus to transmit the media data;

receiving the media data at the chosen second apparatus via the first data transmission link.