Providing content in a communication system

• US 7,765,404 B2
• Filed: 06/29/2004
• Issued: 07/27/2010
• Est. Priority Date: 06/29/2004
• Status: Expired due to Fees

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Lamberg, Samu
• Primary Examiner(s): Cervetti; David Garcia
• Application Number:
  US10/880,217
• Publication Number:
  US 20050286721A1
• Time in Patent Office: 2,219 Days
• Field of Search: 380/270, 380/247, 380/277, 380/285, 726/29, 726/30, 726/31, 713/181
• US Class Current: 713/181
• CPC Class Codes: G06F 21/1063 Personalisation
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/06 Authentication

Abstract

The present invention relates to a method for providing content in a communication system. The method comprises encoding content to a first part and a second part. Furthermore, the method comprises protecting the second part of the content against unauthorised use. Furthermore, the method comprises transmitting the content to user equipment associated with an identity module. The present invention relates also to a method for obtaining content in user equipment in a communication system. The method comprises receiving content encoded to a first layer and a protected second layer. Furthermore, the method comprises requesting for opening the protection of the second layer, receiving opening means and opening the protection of the second layer using the opening means interacting with an identity module associated with the user equipment. Furthermore, a network element and user equipment are configured to execute the method.

Claims

1. A method comprising:

encoding media content to a first part and a second part;

protecting the second part of the encoded media content against unauthorized use using data derived from a secret specific to an identity module, wherein the first part of the encoded media content has not been protected against unauthorized use using data derived from the secret specific to the identity module; and

transmitting, using a network apparatus, the first part and the protected second part of the encoded media content to user equipment associated with the identity module.

2. A method according to claim 1, wherein encoding the media content comprises encoding the media content according to user equipment capabilities based on capabilities of the user equipment and/or user preferences of the user equipment.

3. A method according to claim 1, wherein the protecting comprises encrypting the second part.

4. A method according to claim 3, further comprising requesting an authentication code comprising a challenge and a response.

5. A method according to claim 4, wherein the encrypting comprises encrypting the second part using the response as an encryption key.

6. A method according to claim 1, wherein the network apparatus is configured to transmit the first part and the second part of the encoded media content by a multimedia messaging service.

7. A method according to claim 1, wherein the data used for protecting the second part is an output of an encryption algorithm that takes the secret as an input.

8. A method as claimed in claim 7, wherein the algorithm is shared with the identity module.

9. A method as claimed in claim 8, wherein the algorithm is an authentication algorithm.

10. A method as claimed in claim 9, wherein the algorithm is algorithm A3 or algorithm A8.

11. A method as claimed in claim 10, wherein the secret is Ki.

12. A method according to claim 1, wherein the secret specific to an identity module is additionally used for authenticating and encrypting communications between the user equipment and a communications network.

13. A method comprising:

using a transceiver configured to receive media content encoded to a first part and a second part, wherein the second part of the encoded media content is protected against unauthorized use using data derived from a secret specific to an identity module and wherein the first part of the encoded media content has not been protected against unauthorized use using data derived from a secret specific to an identity module;

requesting opening of the protection of the second part;

receiving enabling data; and

opening the protection of the second part using the enabling data and the secret that is specific to and comprised in the identity module associated with a user equipment.

14. A method according to claim 13, wherein the second part is protected by encryption.

15. A method according to claim 13, wherein receiving enabling data comprises receiving a challenge corresponding to a response used as an encryption key for encrypting the second part.

16. A method according to claim 13, wherein opening the protection comprises submitting the challenge to the identity module and receiving a response from the identity module.

17. A method according to claim 13, wherein opening the protection comprises opening the second part to a volatile memory of the user equipment.

18. A method according to claim 13, further comprising allowing forwarding the first part and the second part of the encoded media content in an unprotected state.

19. A method according to claim 13, further comprising allowing forwarding the first part and the second part of the encoded media content in a protected state.

20. A method according to claim 13, further comprising receiving information on the media content.

21. A method according to claim 20, wherein receiving the information comprises receiving information on a price of opening the protection of the second part.

22. A method according to claim 20, further comprising accepting or withdrawing a request for opening the protection in response to the information on the media content.

23. A method according to claim 13, wherein receiving the media content comprises receiving a multimedia messaging service message in mobile user equipment.

24. A method as claimed in claim 13, wherein the protection of the second part is opened using an authentication algorithm that takes the secret as an input.

25. A method as claimed in claim 24, wherein the algorithm is algorithm A3 or A8.

26. A method as claimed in claim 25, wherein the secret is Ki.

27. A non-transitory computer-readable medium tangibly embodying a computer program, said computer program configured to control a computer to perform:

encoding media content to a first part and a second part;

protecting, using second data derived from a secret specific to an identity module, the second part of the encoded media content against unauthorized use, wherein the first part of the encoded media content has not been protected against unauthorized use using data derived from the secret specific to the identity module; and

enabling transmission of the first part and the protected second part of the encoded media content to user equipment associated with the identity module.

28. A non-transitory computer-readable medium tangibly embodying a computer program, said computer program configured to control a computer to perform:

receiving media content encoded to a first part and a second part, wherein the second part of the encoded media content is protected against unauthorized use using data derived from a secret specific to an identity module and wherein the first part of the encoded media content has not been protected against unauthorized use using data derived from the secret specific to the identity module;

requesting opening of the protection of the second part;

receiving enabling data; and

opening the protection of the second part using data produced by an identity module associated with the user equipment and based upon the enabling data and the secret that is specific to and comprised in the identity module.

29. A network apparatus comprising:

a processor; and

a memory including computer program code,

wherein the memory and computer program code are configured, with the processor, to cause the network apparatus to at least perform;

encoding media content to a first part and second part;

protecting the second part of the encoded media content against unauthorized use using data derived from a secret specific to an identity module, wherein the first part of the encoded media content has not been protected against unauthorized use using data derived from the secret specific to the identity module; and

determining that the first part and the protected second part of the encoded media content is to be transmitted to a user equipment associated with the identity module.

30. A network apparatus according to claim 29, wherein the memory and the computer program code are further configured with the processor to cause the network apparatus to encode the media content according to capabilities of the user equipment and/or user preferences of the user equipment.

31. A network apparatus according to claim 29, wherein the memory and the computer program code are further configured with the processor to cause the network apparatus to protect the second part by encryption.

32. A network apparatus according to claim 31, wherein the memory and the computer program code are further configured with the processor to cause the network apparatus to request an authentication code comprising a challenge and a response.

33. A network apparatus according to claim 32, wherein the memory and the computer program code are further configured with the processor to cause the network apparatus to encrypt the second part using the response as an encryption key.

34. User equipment comprising:

a processor;

a memory including computer program code; and

a transceiver, wherein the transceiver is configured to;

receive media content encoded to a first part and a second part, wherein the second part of the encoded media content is protected against unauthorized use using data derived from a secret specific to an identity module and wherein the first part of the encoded media content has not been protected against unauthorized use using data derived from the secret specific to the identity module;

request opening the second part; and

receive enabling data; and

wherein the memory and the computer program code are configured, with the processor, to cause the user equipment to at least perform;

controlling the opening of the protection of the second part using the enabling data and a secret that is specific to and comprised in the identity module of the user equipment.

35. User equipment according to claim 34, wherein the enabling data is a challenge corresponding to a response used as an encryption key for protecting the second part.

36. User equipment according to claim 35, wherein the memory and the computer program code are further configured with the processor to cause the user equipment to submit the challenge to the identity module and to receive a response from the identity module.

37. User equipment according to claim 34, comprising a volatile memory, wherein the processor is configured to store the content of the second part accessible after opening the second part, to the volatile memory.

38. User equipment according to claim 34, wherein the memory and the computer program code are further configured with the processor to cause the user equipment to deny forwarding the first part and the second part of the encoded media content in an unprotected state.

39. User equipment according to claim 34, wherein the memory and the computer program code are further configured with the processor to cause the user equipment to allow forwarding the first part and the second part of the encoded media content in a protected state.

40. User equipment according to claim 34, wherein the memory and the computer program code are further configured with the processor to cause the user equipment to accept or withdraw a request for opening the protection of the second part in response to information on the media content received in the user equipment.

41. User equipment according to claim 34, comprising a mobile station.

42. User equipment according to claim 34, configured to receive a message transmitted by a multimedia messaging service.

43. User equipment comprising:

an identity module comprising a secret that is specific to the identity module and an algorithm;

a radio transceiver configured to receive media content encoded to a first part and a second part, configured to request opening of the protection of the second part and configured to receive enabling data, wherein the second part of the encoded media content is protected against unauthorized use using data derived from a secret specific to an identity module and wherein the first part of the encoded media content has not been protected against unauthorized use using data derived from the secret specific to the identity module; and

a processor configured to provide the enabling data to the identity module for opening the protection of the second part.

44. User equipment according to claim 43, comprising a volatile memory, wherein the processor is configured to store the content of the second part accessible after opening the second part, to the volatile memory.