Interactive television security through transaction time stamping

• US 5,519,433 A
• Filed: 11/30/1993
• Issued: 05/21/1996
• Est. Priority Date: 11/20/1991
• Status: Expired due to Term

• Current Assignee: OpenTV, Inc. (Kudelski SA)
• Original Assignee: Zing Systems, L.P.
• Inventors: Berkobin, Eric C., Simons, Richard S., Lappington, John P., Yamamoto, Wayne Y., Marshall, Susan K., Wilson, Cameron A.
• Primary Examiner(s): Harvey, David E.
• Application Number:
  US08/160,079
• Time in Patent Office: 903 Days
• Field of Search: 348/1, 348/6, 348/10, 348/12, 348/13, 348/2, 348/4, 348/460, 348/461, 348/473, 348/474, 348/478, 348/500, 348/476, 455/2, 455/3.1, 455/3.2, 455/4.1, 455/4.2, 455/5.1, 455/6.3
• US Class Current: 725/110
• CPC Class Codes: A63F 13/12 involving interaction between a plurality of game devices, e.g. transmisison or distribution systems protocols for networked virtual reality, networked games H04L29/06034
• CPC Class Codes: A63F 13/30 Interconnection arrangements between game servers and game devices; Interconnection arrangements between game devices; Interconnection arrangements between game servers
• CPC Class Codes: A63F 13/338 using television networks
• CPC Class Codes: A63F 2300/401 Secure communication, e.g. using encryption or authentication
• CPC Class Codes: A63F 2300/403 Connection between platform and handheld device
• CPC Class Codes: A63F 2300/409 Data transfer via television network
• CPC Class Codes: A63F 2300/532 using secure communication, e.g. by encryption, authentication
• CPC Class Codes: G09B 7/06 of the multiple-choice answer-type, i.e. where a given question is provided with a series of answers and a choice has to be made from the answers
• CPC Class Codes: H04H 20/31 using in-band signals, e.g. subsonic or cue signal
• CPC Class Codes: H04H 20/38 Arrangements for distribution where lower stations, e.g. receivers, interact with the broadcast
• CPC Class Codes: H04H 60/14 Arrangements for conditional access to broadcast information or to broadcast-related services
• CPC Class Codes: H04H 60/33 Arrangements for monitoring the users' behaviour or opinions
• CPC Class Codes: H04N 21/235 Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/41265 having a remote control device for bidirectional communication between the remote control device and client device unidirectional remote control device H04N21/42204
• CPC Class Codes: H04N 21/435 Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/43637 involving a wireless protocol, e.g. Bluetooth, RF or wireless LAN [IEEE 802.11] arrangements for wireless networking or broadcasting of information in indoor or near-field type systems H04B10/114
• CPC Class Codes: H04N 21/4722 for requesting additional data associated with the content
• CPC Class Codes: H04N 21/4758 for providing answers, e.g. voting
• CPC Class Codes: H04N 21/812 involving advertisement data advertising per se G06Q30/02
• CPC Class Codes: H04N 21/854 Content authoring
• CPC Class Codes: H04N 21/8545 : for generating interactive applications
• CPC Class Codes: H04N 7/088 : the inserted signal being digital
• CPC Class Codes: H04N 7/0882 : for the transmission of character code signals, e.g. for teletext circuits for the digital non-picture data signal H04N7/035
• CPC Class Codes: H04N 7/0888 : Subscription systems therefor
• CPC Class Codes: H04N 7/141 : between two video terminals, e.g. videophone telephonic communication systems combined with television receiver for reception of entertainment or information matter H04M11/085
• CPC Class Codes: H04N 7/163 : by receiver means only
• CPC Class Codes: H04N 7/173 : with two-way working, e.g. subscriber sending a programme selection signal
• CPC Class Codes: H04N 7/17309 : Transmission or handling of upstream communications

Abstract

A system for providing security on an interactive television system. Two sets of interactive data, with time stamps, are separately sent to a remote location. At the remote location, the time stamps are checked against a remote clock, a time difference being noted for both sets of data. The two time differences are compared to determine if one set of data has been delayed as compared to the other. Non-delayed data can be used to update a game score for an interactive game. After the game is completed, the remote clock is compared to a central clock. The difference between the two clocks are compared to the time difference for non-delayed data to determine whether the entire aggregate of interactive data was delayed.

Claims

1. A method for providing security through time stamping, comprising the steps of:

receiving, at a receiving location, data having a time stamp based on a first clock;

computing a first difference between a time represented by said time stamp and a first time generated by a second clock;

calculating a second difference between a second time generated by said second clock and a time generated by an operations clock; and

comparing said first difference to said second difference.

2. A method according to claim 1, wherein:

said operations clock is said first clock.

39. A method according to claim 1, wherein:

said first clock is at a first location;

said second clock is at said receiving location, said receiving location being different from said first location;

said operations clock is at a third location different from said second location and said first location; and

said operations clock is synchronized with said first clock.

40. A method according to claim 1, wherein:

said first clock is at a first location;

said second clock is at said receiving location, said receiving location being different from said first location;

said operations clock is at said first location; and

said operations clock is synchronized with said first clock.

41. A method according to claim 1, wherein:

said time stamp includes a time value generated by said first clock at a time said data was transmitted to said remote location; and

said second clock resides at said receiving location.

42. A method according to claim 1, further including the steps of:

reading said second clock after receiving said data and before calculating said first difference;

presenting a transaction based on said data, after calculating said first difference; and

transmitting results of said transaction to an operations center, before calculating said second difference.

43. A method according to claim 42, wherein:

said operations clock is at said operations center;

said step of calculating said second difference is performed at said operations center; and

said step of comparing is performed at said operations center.

54. A method according to claim 1, wherein:

said first clock resides at a location from which said data is transmitted to said receiving location; and

said second clock resides at said receiving location.

3. A method for providing security through time stamping, comprising the steps of:

receiving, at a receiving location, a first set of data having a first time stamp based on a first clock;

computing a first difference between a time represented by said first time stamp and a first time generated by a second clock;

receiving a second set of data having a second time stamp based on said first clock;

computing a second difference between a time represented by said second time stamp and a second time generated by said second clock; and

comparing said first difference with said second difference to determine whether said second set of data is delayed as compared to said first set of data.

4. A method according to claim 3, further including the steps of:

calculating a third difference between a third time generated by said second clock and a time generated by an operations clock;

calculating a fourth difference by comparing said third time difference to said second time difference if said second set of data was determined not to be delayed as compared to said first set of data, and comparing said third time difference to said first time difference if said second set of data was determined to be delayed as compared to said first set of data;

determining whether said fourth difference is greater than a preset time drift constant.

5. A method according to claim 4, wherein said step of comparing allows for said second clock to drift with respect to one of either said first clock or said operations clock.

6. A method according to claim 4, wherein the step of comparing said first difference to said second difference includes determining a discrepancy by subtracting said first difference from said second difference, so that determining said discrepancy to be greater than a time drift constant indicates that said second set of data is delayed as compared to said first set of data.

7. A method according to claim 4, wherein said operations clock and said first clock are synchronized.

8. A method according to claim 4, wherein said operations clock is said first clock.

44. A method according to claim 3, wherein said step of comparing determines that said second set of data is delayed as compared to said first set of data if said second difference is greater than said first difference.

45. A method according to claim 3, wherein said first clock is at a location different from said receiving location.

46. A method according to claim 3, wherein:

said second clock is at said receiving location;

said first clock is at a central location, said central location being different from said receiving location; and

said operations clock is at an operations location different from said receiving location.

47. A method according to claim 3, further including said steps of:

presenting a first transaction based on said first set of data;

updating a cumulative score, after presenting said first transaction;

presenting a second transaction based on said second set of data;

updating a cumulative score, after presenting said second transaction, if said second difference is less than or equal to said first difference.

48. A method according to claim 3, further including said steps of:

presenting a first transaction based on said first set of data;

updating a cumulative score, after presenting said first transaction;

presenting a second transaction based on said second set of data;

updating a cumulative score, after presenting said second transaction, if said second difference is within a predetermined range of said first difference;

reading a time value of said second clock;

transmitting said cumulative score, said time value and a delta to an operations center, said delta being said second time difference if said second difference is less than or equal to said first difference, said delta being said first time difference if said second difference is greater than said first difference;

calculating, at said operations center, a third difference between said time value and a time generated by an operations clock;

determining that said cumulative score is valid if said third difference is within a predetermined range of said delta.

49. A method according to claim 4, wherein:

said second clock is at said receiving location;

said first clock is at a central location, said central location being different from said receiving location; and

said operations clock is at an operations location different from said receiving location.

50. A method according to claim 4, further including said steps of:

presenting a first transaction based on said first set of data;

updating a cumulative score based on said first transaction;

presenting a second transaction based on said second set of data; and

updating said cumulative score based on said second transaction if said second difference is within a predetermined range of said first difference.

9. A method for providing security, comprising the steps of:

receiving, at a receiving location, a first set of data having a first time stamp based on a first clock;

computing a first difference between a time represented by said first time stamp and a time generated by a second clock;

receiving a second set of data having a second time stamp based on said first clock;

computing a second difference between a time represented by said second time stamp and a time generated by said second clock;

comparing said first difference with said second difference to determine whether said second set of data is delayed as compared to said first set of data and whether said first set of data is delayed as compared to said second set of data;

calculating a third difference between a time generated by said second clock and a time generated by an operations clock;

testing whether said first set of data is valid by comparing said third time difference to said first time difference if said first set of data was determined not to be delayed as compared to said second set of data; and

testing whether said second set of data is valid by comparing said third time difference to said second time difference if said second set of data was determined not to be delayed as compared to said first set of data.

10. A method according to claim 9, wherein the step of testing whether said second set of data is valid allows for said second clock to drift with respect to said first clock.

11. A method according to claim 9, wherein the step of comparing said first difference with said second difference includes determining a discrepancy by subtracting said first difference from said second difference, so that if said discrepancy is greater than a time drift constant, said discrepancy indicates that said second set of data is delayed.

12. A method according to claim 9, wherein said operations clock and said first clock are synchronized.

51. A method according to claim 9, wherein:

said first difference is equivalent to said second difference if said second set of data is not delayed as compared to said first set of data and said first set of data is not delayed as compared to said second set of data.

13. A system for securing interactive television using time stamps, comprising:

a receiver capable of receiving at least two sets of interactive data, each set of interactive data having a time stamp based on a first clock;

a second clock;

comparison means for comparing times represented by said time stamps to times generated by said second clock;

delay means, based on said comparing performed by said comparison means, for determining whether a first set of said interactive data is delayed as compared to a second set of said interactive data;

presentation means, based on said second set of interactive data, for presenting a transaction to a viewer;

verification means, based on said second clock and said comparing performed by said comparison means, for determining if said sets of interactive data were delayed.

14. A system according to claim 13, wherein the verification means is at a central location;

and

further including means for communicating between said delay means and said central location.

15. A system according to claim 13, wherein said verification means determines a time difference equal to a time generated by said second clock subtracted from a time generated by said first clock and uses said time difference to determine whether said interactive data was delayed from its broadcast.

16. A system for preventing cheating using time stamps, comprising:

means for receiving interactive data over a period of time, said interactive data including a first set of interactive data having a first time stamp and a second set of interactive data having a second time stamp, said first and said second time stamps based on a first clock;

a second clock;

delay comparison means for comparing times generated by said second clock to times represented by said first and second time stamps and for determining if said first set of data is delayed as compared to said second set of data and if said second set of data is delayed as compared to said first set of data; and

means for determining whether at least one set of said interactive data was delayed.

17. A system according to claim 16, wherein said delay comparison means includes

means for computing a first difference between a time represented by said first time stamp and a time generated by said second clock and for computing a second difference between a time represented by said second time stamp and a time generated by said second clock;

and

means for comparing said first difference with said second difference to determine whether said second transaction is delayed as compared to said first transaction.

18. A system according to claim 16, wherein said means for determining includes:

means for calculating a third difference between a time generated by said second clock and a time generated by a third clock, and

means for comparing said third difference to said second difference if said second transaction was determined not to be delayed as compared to said first time difference and for comparing said third difference to said first difference if said second transaction was determined to be delayed as compared to said first difference.

52. A system according to claim 18, wherein said first clock and said third clock are the same clock.

19. A method for preventing cheating using time stamps, comprising:

inserting a time stamp, based on a first clock, into a first set of interactive data;

sending said first set of interactive data to a remote location, said remote location having a remote clock so that a first delta can be determined for said first set of interactive data, said first delta being equal to a difference between a time represented by said time stamp and a time generated by said remote clock so that said first delta of said first set of interactive data can be compared to a second delta of a second set of interactive data to determine if said first set of interactive data is delayed as compared to said second set of interactive data;

receiving remote data from said remote location, said remote data including a reading of said remote clock and a remote delta, said remote delta being equivalent to said delta of said second set of interactive data if said second set of interactive data was not delayed as compared to said first set of interactive data else said remote delta being equivalent to said delta of said first set of interactive data;

determining a time difference between said first clock and said reading of said remote clock; and

comparing said time difference with said remote delta.

20. A method according to claim 19, wherein said step of comparing includes taking into account time drift for said remote clock.

21. A method for providing security, comprising the steps of:

time stamping a first set of data based on a first time generated by a first clock;

transmitting said data to a remote location;

determining a first difference between the time represented by the time stamp in said first set of data and a first time generated by a second clock;

time stamping a second set of data based on a second time generated by said first clock;

transmitting said second set of data to said remote location;

determining a second difference between the time represented by said time stamp in said second set of data and a second time generated by said second clock;

determining a discrepancy equal to said first difference subtracted from said second difference;

storing a differential value, said stored differential value being equal to said first difference if said discrepancy is greater than a first time drift constant, said differential value being equal to said second difference if said discrepancy is not greater than said first time drift constant;

determining a time difference between a time generated by an operations clock and a time generated by said second clock;

determining an offset equal to a difference between said time difference and said stored differential value so that said first set of data is valid if said offset is less than a second time drift constant and said discrepancy is greater than a negative of said first time drift constant, and said second set of data is valid if said offset is less than said second time drift constant and said discrepancy is less than said first time drift constant.

22. A method according to claim 21, wherein said operations clock and said first clock are synchronized.

23. A method according to claim 21, wherein said first time drift constant is nonzero.

24. A method according to claim 21, wherein said second time drift constant is nonzero.

25. A security system for interactive presentations, comprising:

a receiver, adapted to receive a communication signal and read interactive data from said communication signal, said interactive data including a first set of data and a second set of data, said first set of data includes a first time stamp, said second set of data includes a second time stamp;

a first clock;

at least one processor, in communication with said receiver and said first clock, said at least one processor capable of computing a first difference between a time represented by said first time stamp and a first time generated by said first clock and computing a second difference between a time represented by said second time stamp and a second time generated by said first clock and to compute a third difference between said first difference and said second difference so that said at least one processor determines that said first set of data and said second set of data are not delayed with respect to each other if said third difference is less than a constant.

26. A system according to claim 25, wherein:

said time stamp is based on a second clock; and

said security system further includes a transmitter adapted to send said third difference and a third time generated by said first clock to a central office so that a fourth difference can be computed between said third time generated by said first clock and a time generated by an operations clock, with said fourth difference being compared to said third difference.

27. A system according to claim 26, wherein said operations clock and said second clock are different clocks.

28. A system according to claim 25, wherein said constant is non-zero.

29. A system according to claim 25, wherein said at least one processor includes a first processor, and a second secured processor capable of saving data in a secure manner.

30. A system according to claim 25, further including:

a memory, in communication with said at least one processor, adapted to store interactive data;

a display, in communication with said at least one processor;

a keyboard, in communication with said at least one processor, adapted to allow a viewer to input a response to said processor;

wherein said at least one processor presents a first transaction to a viewer based on said first set of data and presents a second transaction to said viewer based on said second transaction.

31. A system according to claim 30, wherein said memory includes a plurality of programmer tables including a first programmer adapted to store data relevant to said first transaction and a second programmer table adapted to store interactive data relevant to a second transaction.

32. A system according to claim 30, wherein said memory includes:

a first location adapted to save a cumulative score of an interactive presentation; and

a cheater bit having set and unset states, said first location being adapted to freeze when said cheater bit is set;

wherein said cheater bit is set if said third difference is greater than said constant.

33. A system according to claim 30, wherein said memory includes:

a first location adapted to save a cumulative score of an interactive presentation; and

a cheater bit, said first location adapted to reset when said cheater bit is set;

wherein said cheater bit is set if said third difference is greater than said constant.

53. A system according to claim 26, wherein said operations clock and said second clock are the same clock.

34. A security system for interactive presentations, comprising:

a receiver capable of receiving interactive data, said interactive data including a plurality of transactions, each transaction including a time stamp;

a clock;

a first processor, in communication with said receiver and said clock, programmed to present said transactions to a viewer;

said first processor creates a plurality of deltas by comparing times represented by said time stamps to times generated by said clock when said transaction is received by said receiver, said first processor compares deltas to determine if one transaction is delayed as compared to a second transaction;

a memory, in communication with said first processor, said memory adapted to store a cumulative score for said transactions; and

a transmitting unit, in communication with said memory and said clock and said first processor, said transmitting unit adapted to transmit said cumulative score to another location.

35. A system according to claim 34, wherein said transmitting unit transmits said cumulative score, one of said deltas and a clock time value to said another location so that a discrepancy can be calculated equal to a difference between said clock time value and a time generated by an operations clock at said another location, said cumulative score being valid if said discrepancy is within a predetermined range of said transmitted delta.

36. A system according to claim 34, wherein said memory includes a plurality of programmer tables, at least a subset of said plurality of programmer tables include:

a first register for storing game points;

a second register for storing cumulative series points; and

a third register for storing sequencing information.

37. A system according to claim 36, further including a second processor for maintaining secure data.

38. A system according to claim 36, further including a keyboard, in communication with said first processor, and a display, in communication with said first processor.