Trusted transactional set-top box

• US 7,346,917 B2
• Filed: 05/21/2001
• Issued: 03/18/2008
• Est. Priority Date: 05/21/2001
• Status: Expired due to Fees

• Current Assignee: Mudalla Technology, Inc.
• Original Assignee: Cyberview Technology, Inc. (International Game Technology)
• Inventors: De Courssou, Thierry Brunet, Gatto, Jean-Marie
• Primary Examiner(s): Kelley, Chris
• Assistant Examiner(s): Van Handel, Michael
• Application Number:
  US09/862,165
• Publication Number:
  US 20020174444A1
• Time in Patent Office: 2,493 Days
• Field of Search: 725/1, 725/2, 725/6, 725/109, 725/112, 725/131, 725/4, 725/5, 725/60, 705/26, 705/27, 705/75
• US Class Current: 725/5
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04M 1/72415 for remote control of appliances
• CPC Class Codes: H04N 21/4117 for generating hard copies of the content, e.g. printer, electronic paper interfaces to printers G06F3/12; printing data G06K15/02
• CPC Class Codes: H04N 21/4182 for identification purposes, e.g. storing user identification data, preferences, personal settings or data restricting access to computer systems by authenticating users using a predetermined code in combination with an additional device, e.g. dongle or smart card G06F21/123
• CPC Class Codes: H04N 21/42222 Additional components integrated in the remote control device, e.g. timer, speaker, sensors for detecting position, direction or movement of the remote control, microphone or battery charging device
• CPC Class Codes: H04N 21/426 Internal components of the client ; Characteristics thereof H04N5/44 takes precedence
• CPC Class Codes: H04N 21/4316 for displaying supplemental content in a region of the screen, e.g. an advertisement in a separate window
• CPC Class Codes: H04N 21/4331 Caching operations, e.g. of an advertisement for later insertion during playback
• CPC Class Codes: H04N 21/435 Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/441 Acquiring end-user identification , e.g. using personal code sent by the remote control or by inserting a card
• CPC Class Codes: H04N 21/4432 Powering on the client, e.g. bootstrap loading using setup parameters being stored locally or received from the server resetting in general G06F1/14; program loading or initiating in general G06F9/445; bootstrapping in general G06F9/4401; secure boots of computer platforms G06F21/57
• CPC Class Codes: H04N 21/47815 Electronic shopping payment schemes, payment architectures or payment protocols for electronic shopping systems G06Q20/12
• CPC Class Codes: H04N 21/4782 Web browsing , e.g. WebTV
• CPC Class Codes: H04N 21/4786 e-mailing message switching systems, e.g. electronic mail systems H04L51/00
• CPC Class Codes: H04N 21/6175 involving transmission via Internet broadcast-related systems characterised by the transmission system being the Internet H04H60/82
• CPC Class Codes: H04N 21/654 Transmission by server directed to the client
• CPC Class Codes: H04N 21/6582 Data stored in the client, e.g. viewing habits, hardware capabilities, credit card number arrangements where receivers interact with the broadcast H04H20/38
• CPC Class Codes: H04N 5/45 Picture in picture , e.g. displaying simultaneously another television channel in a region of the screen
• CPC Class Codes: H04N 7/163 by receiver means only

Abstract

A set top box (STB) includes a trusted transactional cache and associated transactional protocol and enables e-commerce transactions to be securely committed to a remote server extremely quickly and with little network overhead. The invention does away with the user concern of whether the transaction was successful. The STB operates equally well on robust private networks as on unpredictable Internet or wireless networks, and avoids upsetting users who would otherwise have to wait in front of a display screen for confirmation of completion of the transaction after a temporary communication failure with the central site. The method may advantageously be used to provide cost-effective micro-payments solutions. The STB may include a dual headed display capability in which data and video maybe be directed to separate displays. The STB may feature an embedded ticket printer, as well as an embedded barcode scanner. This enables non computer literate users to more conveniently track transactions committed via the STB, or to take advantage of promotional coupons. The STB features an embedded hardware true Random Number Generator to produce maximum entropy encryption keys, therefore providing maximum secure and fool-proof means to protect private data using government authorized encryption schemes.

Claims

1. A set top box comprising:

a processor for controlling the set top box;

a video decoder coupled to the processor, the video decoder providing a decoded video signal;

a graphics interface coupled to the video decoder to output the decoded video signal to at least one display;

a network interface to access a computer network;

a user interface enabling user interaction with the processor, initiating a transaction and committing the transaction to a remote server coupled to the computer network, and

a non-volatile cache memory coupled to the processor, the non-volatile cache memory including;

a Non-Volatile Random Access Memory (NVRAM);

a context data save engine configured to store a context of the committed transaction to the NVRAM after the committed transaction is sent to the remote server but before an acknowledgement of the committed transaction is received from the remote server;

a printer coupled to the processor, the processor controlling the printer to print a confirmed acknowledgment ticket when a confirmation of the committed transaction is received from the remote server within a predetermined period of time, the processor controlling the printer to print a provisional acknowledgment ticket when the confirmation of the committed transaction is not received from the remote server within the predetermined period of time, at least the provisional acknowledgment ticket including machine readable information that uniquely identifies the committed transaction, and

a reader configured to read at least the machine readable information printed on the provisional acknowledgment ticket, the processor being further configured to control the printer to print the confirmed acknowledgment ticket corresponding to the uniquely identified committed transaction if the acknowledgment was received from the remote server since the provisional acknowledgment ticket was printed.

2. The set top box of claim 1, wherein the context data save engine is further configured to store the context of the transaction at least one of:

before sending the transaction to the remote server, and

after having received a confirmed acknowledgment of the transaction from the remote server.

3. The set top box of claim 1, wherein the machine-readable information includes a barcode and wherein the reader includes a barcode reader.

4. The set top box of claim 2, wherein the processor is configured to execute the transaction in a first user session that concludes after the context data save engine has saved the context of the transaction to the NVRAM and the provisional acknowledgment ticket is printed and to execute a second remote server session that concludes after the acknowledgement is received from the remote server and the confirmed acknowledgment ticket is printed.

5. The set top box of claim 1, further comprising a hardware random number generator, the hardware random number generator being configured to provide the processor with encryption keys to encrypt the user initiated transaction.

6. The set top box of claim 1, wherein the at least one display includes at least one of a television set, a High Definition Television (HDTV) and a computer monitor, the graphics interface being configured to selectively output the decoded video signal to the at least one display in full screen mode, picture-in-picture mode, mosaic mode or multi-window mode.

7. The set top box of claim 1, further comprising at least one of a magnetic and a smart card reader.

8. A method of carrying out an online transaction between a set top box and a remote server, each of the set top box and the remote server being coupled to a network, the method comprising the steps of:

initiating a transaction at the set top box;

storing a copy of the transaction in a non-volatile memory within the set top box;

sending the transaction to the remote server under a control of the set top box;

printing a confirmed acknowledgment ticket of the transaction when a confirmed acknowledgment of the transaction is received from the remote server within a predetermined period of time;

printing a provisional acknowledgment ticket that includes machine readable information that uniquely identifies the transaction from the copy of the transaction stored in the non-volatile memory when the confirmed acknowledgment is not received within the predetermined period of time;

reading the printed machine-readable information upon presentation of the provisional acknowledgment ticket to the set top box, and

printing the confirmed acknowledgment ticket corresponding to the uniquely identified transaction if the confirmed acknowledgment was received from the remote server since the provisional acknowledgment ticket was printed.

9. The method of claim 8, further comprising the step of:

receiving the confirmed acknowledgment from the remote server after the predetermined period of time and storing the received confirmed acknowledgment in the non-volatile memory.

10. The method of claim 9, further including a step of providing the stored confirmed acknowledgment upon request.

11. The method of claim 8, further comprising the step of re-sending the copy of the user transaction stored in the non-volatile memory to the remote server upon failure to receive the confirmed acknowledgment from the remote server.

12. The method of claim 11, wherein the re-sending step is carried out until a confirmed acknowledgment of the transaction is received from the remote server.

13. The method of claim 11, wherein the re-sending step is carried out a predetermined number of times.

14. The method of claim 8, wherein the set top box includes a user interface that enables user interaction with the set top box and wherein the initiating step includes a step of providing user credentials and selecting goods and/or services for purchase via the user interface.

15. The method of claim 14, wherein the user credentials include at least one of identification and payment instrument information and wherein the user credentials are supplied to the set top box via a remote control device.

16. The method of claim 8, wherein the initiating step includes a step of encapsulating all information required for the remote server to process the transaction into a single data packet and wherein the storing and sending steps store and send the single data packet in the non-volatile memory and to the remote server, respectively.

17. The method of claim 16, wherein the information required for the remote server to process the transaction includes at least one of:

user credentials including at least one of an identity of the user;

payment instrument information;

delivery information, and

information identifying the subject matter of the transaction.

18. The method of claim 16, further including a step of encrypting the single data packet prior to the sending step.