Preventing a non-head end based service provider from sending media to a media processing system

• US 8,819,845 B2
• Filed: 04/05/2012
• Issued: 08/26/2014
• Est. Priority Date: 12/11/2002
• Status: Expired due to Fees

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Karaoguz, Jeyhan, Bennett, James D.
• Primary Examiner(s): LEMMA, SAMSON B
• Application Number:
  US13/440,791
• Publication Number:
  US 20120192219A1
• Time in Patent Office: 873 Days
• Field of Search: 726/3, 726/4, 726/27, 713/155, 713/168, 725/138, 725/139, 725/144, 725/25, 380/211, 709/229
• US Class Current: 726/27
• CPC Class Codes: H04L 12/2832 Interconnection of the control functionalities between home networks single bridge functionality H04L12/4625
• CPC Class Codes: H04L 2012/2849 Audio/video appliances
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

Systems and methods that prevent unauthorized access in a communications network are provided. In one embodiment, a system that prevents unauthorized access to a network device may include, for example, a network device and a headend. The headend may be coupled to a communications network. The network device may be deployed in a home environment and may be communicatively coupled to the communications network via the headend. The headend may be adapted, for example, to determine whether a request to access the network device is authorized.

Claims

1. A system comprising:

a network device configured to be deployed in a home environment; and

a cable television headend configured to be coupled to a communications network, the cable television headend in data communication with the network device and configured to determine whether a particular service provider seeking access from the communications network to the network device is authorized to communicate data defining digital media for playback on the network device from the communications network to the network device.

2. The system of claim 1 wherein the network device comprises at least one of:

a computer,

a storage device;

set-top box circuitry,

a television,

a display, and

a remote control.

3. The system of claim 1 wherein the cable television headend is configured to process on or more of a device identification, an internet protocol (IP) address, a digital certificate and a key.

4. The system of claim 1 wherein the cable television headend is configured to:

authorize a device seeking access over the communications network to communicate with the network device;

receive a file from the authorized device; and

push the received file to the network device.

5. The system of claim 1 wherein the cable television headend is deployed outside the home environment wherein the network device is deployed.

6. A system that prevents unauthorized access comprising:

one or more network devices in a home network;

a television headend coupled to the one or more network devices and configured for data communication between the one or more network devices and an external communications network;

the television headend being operative to determine whether a request received from the communications network to provide data defining digital media from a remote location over the external communications network to the one or more network devices is authorized.

7. The system of claim 6 wherein the television headend is operative to determine whether a particular service provider which is seeking access to the one or more network devices over the communications network is authorized to send data to the one or more network devices.

8. The system of claim 7 wherein the television headend is not part of the home network.

9. The system of claim 6 wherein the television headend is configured to perform one or more of:

Internet protocol registration, identification registration and digital rights management.

10. The system of claim 6 wherein the television headend comprises a cable television headend.

11. The system of claim 6 wherein the television headend comprises a satellite television headend.

12. The system of claim 6 wherein the television headend comprises a digital subscriber line headend.

13. The system of claim 6 wherein the television headend is configured to perform at least one of:

channel or program set up,

channel or program management,

anonymous proxy services,

media caching,

media storage,

billing, and

tracking.

14. A method for controlling access from a communications network, the method comprising:

at a television headend, communicating data between the communications network and a network device;

at the television headend, receiving a request to provide digital media data from a remote source over the communications network to the network device;

at the headend;

determining if the request to access the network device is authorized; and

at the headend;

denying the request to access the network device if the request is not authorized.

15. The method of claim 14 further comprising:

at the headend;

receiving a request from a particular service provider to access the network device; and

at the headend;

determining whether the particular service provider is authorized to access the network device.

16. The method of claim 15 further comprising:

receiving from the particular service provider a code to access the network device via the headend; and

determining whether the received code corresponds to authorization to access the network device.

17. The method of claim 16 wherein receiving the code comprises:

receiving a password to access the network device.

18. The method of claim 14 further comprising:

at the headend, storing one or more of a device identification, an internet protocol address, a digital certificate, a key and a hashing signature.

19. The method of claim 14 further comprising:

at the headend, receiving a file over the communications network from an authorized device; and

pushing the file to the network device.

20. The method of claim 14 wherein communicating data between the communications network and the network device comprises communicating data between the communications network and one of a computer, a storage device, set-top box circuitry, a television, a display and a remote control.