Apparatus and methods for providing content to an IP-enabled device in a content distribution network

• US 9,992,520 B2
• Filed: 11/30/2015
• Issued: 06/05/2018
• Est. Priority Date: 02/23/2012
• Status: Active Grant

• Current Assignee: Time Warner Cable Enterprises LLC (Charter Communications Incorporated)
• Original Assignee: Time Warner Cable Enterprises LLC (Charter Communications Incorporated)
• Inventors: Williamson, Louis D., Helms, William L., Pfeffer, Howard, Paci, Noah, Nakhre, Tushar, Danforth, Andrew, Hasek, Charles, Huang, Shan
• Primary Examiner(s): Armouche, Hadi S
• Assistant Examiner(s): Song, Hee K
• Application Number:
  US14/954,754
• Publication Number:
  US 20160165268A1
• Time in Patent Office: 918 Days
• Field of Search: 725 2, 725 25, 725 61, 725 87, 725 93, 725106, 725114, 725145, 725151, 726 1, 726 13, 726 12, 709217, 709221, 709222, 709227, 709231, 713151, 713155, 713164, 713168
• CPC Class Codes: G06F 21/1012 to domains
• CPC Class Codes: G06F 21/1083 Partial license transfers
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04N 21/2351 involving encryption of additional data arrangements using cryptography for the use of broadcast information or broadcast-related information H04H60/23
• CPC Class Codes: H04N 21/236 Assembling of a multiplex stream, e.g. transport stream, by combining a video stream with other content or additional data, e.g. inserting a URL [Uniform Resource Locator] into a video stream, multiplexing software data into a video stream; Remultiplexing of multiplex streams; Insertion of stuffing bits into the multiplex stream, e.g. to obtain a constant bit-rate; Assembling of a packetised elementary stream multiplexing of data packets for data networks, e.g. RTP/UDP H04L65/00
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/26258 for generating a list of items to be played back in a given order, e.g. playlist, or scheduling item distribution according to such list retrieval of multimedia data based on playlists G06F16/40
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/64322 IP
• CPC Class Codes: H04N 21/8456 by decomposing the content in the time domain, e.g. in time segments

Abstract

Apparatus and methods for providing content to IP-enabled devices in a content distribution network. In one embodiment, a network architecture is disclosed which enables delivery of content to such IP-enabled devices without the use of a high-speed data connection This capability allow the managed network operator to provide content services to an IP-enabled device associated with a non-data subscriber. In one implementation, requests for content from user IP-enabled devices are received, authenticated, and content processed into a series of encrypted segments. Once the requesting user/device is authenticated, the segments are provided with a playlist. The rendering device is also provided access to a decryption key (e.g., via a URL to a managed key server). Variants providing (i) user access to the MSO distribution network via an indigenous modem or gateway; and (ii) user access to the MSO core via a gateway and a third party unmanaged network are described.

Claims

1. A method for providing content to an Internet Protocol (IP)-enabled user device via a managed content distribution network, the user device associated with a subscriber of the network, the method comprising:

receiving a request for a content element, the request received from the user device via a wireless-enabled settop box, the content element comprising at least video;

authenticating the wireless-enabled settop box as having a valid video services subscription only;

processing the content element into a plurality of segments, each of the plurality of segments being associated to a particular uniform resource locator (URL);

cryptographically protecting at least a portion of the plurality of segments;

generating a playlist configured to, when selected for playback by the subscriber, form a complete playout of the requested content element, the playlist comprising data representative of a list of the particular URL for each of the plurality of segments of the complete playout and a URL associated with a cryptographic element, the cryptographic element being configured to decrypt content which has been cryptographically protected; and

providing the data representative of the playlist and the plurality of protected segments to the user device via the managed content distribution network and the wireless-enabled settop box of the subscriber in data communication with the managed content distribution network, the providing via the managed content distribution network and the wireless-enabled settop box comprising delivery, via infrastructure of the managed content distribution network utilized for at least delivery of Moving Picture Experts Group (MPEG) video services, and over in-band quadrature amplitude modulation (QAM) channels using an MPEG-2 transport stream and encapsulation protocol.

2. The method of claim 1, wherein the managed network is selected from a group consisting of:

(i) a cable television network;

(ii) a satellite network; and

(iii) a hybrid fiber copper (HFCu) network.

3. The method of claim 1, wherein the cryptographic element comprises a decryption key configured to decrypt content which has been encrypted.

4. The method of claim 1, wherein the cryptographically protecting comprises encrypting the plurality of segments utilizing a symmetric encryption key approach.

5. The method of claim 1, wherein the plurality of segments comprises a plurality of Moving Pictures Experts Group (MPEG) transport stream (.ts) files.

6. The method of claim 1, wherein at least the plurality of protected segments and the data representative of the playlist are provided as part of a common data structure to the user device.

7. The method of claim 1, wherein the request is received indirectly from the user device via the premises device, the request being rendered at least in part in an Hypertext Transfer Protocol (HTTP)-based protocol such that no translation thereof by the content distribution network is required.

8. The method of claim 1, wherein the cryptographic element comprises a predetermined use period after which the cryptographic element is no longer valid.

9. The method of claim 1, wherein the cryptographically protecting at least a portion of the plurality of segments comprises using a first key to encrypt the segments during a first period, and a second key to encrypt the segments during a second, subsequent period.

10. Network apparatus configured to enable provision of Internet Protocol (IP) content to an IP-enabled user device via a managed content distribution network via extant video delivery infrastructure, the IP-enabled user device associated with a subscriber of the managed content distribution network, the subscriber registered therein, the network apparatus comprising:

processing apparatus;

data interface apparatus in data communication with the processing apparatus and configured to receive requests from IP-enabled user devices via the managed network;

a subscriber database in data communication with the processing apparatus, the database comprising data authenticating the subscriber as being entitled to access the requested content element; and

computerized logic in data communication with the processing apparatus and configured to;

based at least on a received request from the IP-enabled user device for a content element, cause access of the database to authenticate the subscriber, the request comprising authentication data provided by the subscriber;

after the authentication, cause processing of the content element into a plurality of segments, each of the plurality of segments being associated to a particular uniform resource locator (URL);

cause cryptographic protection of at least a portion of the plurality of segments;

cause generation of data representative of a playlist configured to, when selected for playback by the subscriber, form a complete playout of the requested content element, the data representative of the playlist comprising a list of the particular URL for each of the plurality of segments of the complete playout and a URL associated with a cryptographic element, the cryptographic element being configured to decrypt content which has been cryptographically protected; and

cause provision, via infrastructure of the managed network, of the data representative of the playlist and the plurality of protected segments to the IP-enabled user device via an MPEG-based transport stream and a settop box in data communication with the IP-enabled user device;

wherein;

the managed network utilized for delivery of at least Moving Picture Experts Group (MPEG) video services;

the provision comprises delivery of the data representative of the playlist and the plurality of protected segments over in-band quadrature amplitude modulation (QAM) channels using an MPEG-2 transport stream and encapsulation protocol; and

the authentication comprises authentication of the settop box as having a valid video services subscription only.

11. The apparatus of claim 10, wherein the provision of the data representative of the playlist and the plurality of protected segments to the user device occurs without the use of high-speed data services.

12. The apparatus of claim 10, wherein the authentication comprises use of a geographic location associated with the subscriber.

13. The apparatus of claim 10, wherein the computerized logic is further configured to cause dynamic caching of one or more versions of the content element at an edge of the managed network based at least in part on a duplicate request for the one or more versions of the content element.

14. Computer readable apparatus comprising a non-transitory storage medium, the non-transitory medium comprising at least one computer program having a plurality of instructions, the instructions configured to, when executed on a processing apparatus:

receive data representative of a request for a digitally rendered content element, the data representative of the request received from a computerized user device via a settop box (STB);

authenticate the STB as having a valid video services subscription only;

cause processing of the digitally rendered content element into a plurality of segments, each of the plurality of segments being associated to a particular uniform resource locator (URL);

cause cryptographic protection of at least a portion of the plurality of segments;

cause generation of a playlist configured to, when selected for playback by the subscriber, form a complete playout of the requested content element, the playlist comprising a list of the particular URL for each of the plurality of segments of the complete playout and a URL associated to a cryptographic element, the cryptographic element being configured to decrypt content which has been cryptographically protected; and

cause provision of the playlist and the plurality of protected segments to the computerized user device via;

(i) the STB, and (ii) infrastructure of a managed content distribution network also utilized for delivery of MPEG video services, the provision comprising delivery over in-band quadrature amplitude modulation (QAM) channels using an MPEG-2 transport stream and encapsulation protocol.

15. The computer readable apparatus of claim 14, wherein the data representative of the request is received from the user device via an unmanaged wireless access point, the data representative of the request being rendered at least in part in an Hypertext Transfer Protocol (HTTP)-based protocol such that no translation thereof by the managed content distribution network or an unmanaged network of the unmanaged wireless access point is required.

16. The computer readable apparatus of claim 15, wherein the unmanaged network comprises a network of a service provider, the service provider being federated with the managed content distribution network such that subscribers of the managed content distribution network can be authenticated by the service provider outside of the managed content distribution network in response to the request.

17. The computer readable apparatus of claim 14, wherein the instructions are further configured to, when executed on a processing apparatus:

cause dynamic caching of one or more versions of the digitally rendered content element at an edge of the managed content distribution network based at least in part on a duplicate request for the one or more versions of the digitally rendered content element.