EP1206876A1 - Procede et systeme de peage d'achat-reflexe de services informatiques et multimedia - Google Patents

Procede et systeme de peage d'achat-reflexe de services informatiques et multimedia

Info

Publication number
EP1206876A1
EP1206876A1 EP00952474A EP00952474A EP1206876A1 EP 1206876 A1 EP1206876 A1 EP 1206876A1 EP 00952474 A EP00952474 A EP 00952474A EP 00952474 A EP00952474 A EP 00952474A EP 1206876 A1 EP1206876 A1 EP 1206876A1
Authority
EP
European Patent Office
Prior art keywords
subscriber
ippu
selection
access controller
accordance
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP00952474A
Other languages
German (de)
English (en)
Inventor
Reem Safadi
Eric J. Sprunk
Doug Makofka
Ray Bontempi
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Arris Technology Inc
Original Assignee
Arris Technology Inc
General Instrument Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Arris Technology Inc, General Instrument Corp filed Critical Arris Technology Inc
Publication of EP1206876A1 publication Critical patent/EP1206876A1/fr
Withdrawn legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/47—End-user applications
    • H04N21/472—End-user interface for requesting content, additional data or services; End-user interface for interacting with content, e.g. for content reservation or setting reminders, for requesting event notification, for manipulating displayed content
    • H04N21/47211—End-user interface for requesting content, additional data or services; End-user interface for interacting with content, e.g. for content reservation or setting reminders, for requesting event notification, for manipulating displayed content for requesting pay-per-view content
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/63—Control signaling related to video distribution between client, server and network components; Network processes for video distribution between server and clients or between remote clients, e.g. transmitting basic layer and enhancement layers over different transmission paths, setting up a peer-to-peer communication via Internet between remote STB's; Communication protocols; Addressing
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/08—Payment architectures
    • G06Q20/12—Payment architectures specially adapted for electronic shopping systems
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/08—Payment architectures
    • G06Q20/14—Payment architectures specially adapted for billing systems
    • G06Q20/145—Payments according to the detected use or quantity
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F17/00—Coin-freed apparatus for hiring articles; Coin-freed facilities or services
    • G07F17/16—Coin-freed apparatus for hiring articles; Coin-freed facilities or services for devices exhibiting advertisements, announcements, pictures or the like
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/254—Management at additional data server, e.g. shopping server, rights management server
    • H04N21/2543—Billing, e.g. for subscription services
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/258—Client or end-user data management, e.g. managing client capabilities, user preferences or demographics, processing of multiple end-users preferences to derive collaborative data
    • H04N21/25866—Management of end-user data
    • H04N21/25875—Management of end-user data involving end-user authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/47—End-user applications
    • H04N21/478—Supplemental services, e.g. displaying phone caller identification, shopping application
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/61—Network physical structure; Signal processing
    • H04N21/6106—Network physical structure; Signal processing specially adapted to the downstream path of the transmission network
    • H04N21/6125—Network physical structure; Signal processing specially adapted to the downstream path of the transmission network involving transmission via Internet
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/63—Control signaling related to video distribution between client, server and network components; Network processes for video distribution between server and clients or between remote clients, e.g. transmitting basic layer and enhancement layers over different transmission paths, setting up a peer-to-peer communication via Internet between remote STB's; Communication protocols; Addressing
    • H04N21/633—Control signals issued by server directed to the network components or client
    • H04N21/6332—Control signals issued by server directed to the network components or client directed to client
    • H04N21/6334—Control signals issued by server directed to the network components or client directed to client for authorisation, e.g. by transmitting a key
    • H04N21/63345—Control signals issued by server directed to the network components or client directed to client for authorisation, e.g. by transmitting a key by transmitting keys
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/16—Analogue secrecy systems; Analogue subscription systems
    • H04N7/162—Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
    • H04N7/165—Centralised control of user terminal ; Registering at central
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/16—Analogue secrecy systems; Analogue subscription systems
    • H04N7/167—Systems rendering the television signal unintelligible and subsequently intelligible
    • H04N7/1675—Providing digital key or authorisation information for generation or regeneration of the scrambling sequence
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/16—Analogue secrecy systems; Analogue subscription systems
    • H04N7/173—Analogue secrecy systems; Analogue subscription systems with two-way working, e.g. subscriber sending a programme selection signal
    • H04N2007/1739—Analogue secrecy systems; Analogue subscription systems with two-way working, e.g. subscriber sending a programme selection signal the upstream communication being transmitted via a separate link, e.g. telephone line

Definitions

  • the present invention relates to communications networks such as cable television, satellite television and computer networks over which services are available for a fee, and more particularly to a method and system for allowing data and multimedia services to be purchased over such networks .
  • Cable and satellite television networks where video services are available for a fee are well known. Also well known are computer network services such as the Internet, America On-Line, CompuServe and others having web sites with different types of applications ranging from general information to entertainment to electronic shopping, all of which can be accessed for a fixed monthly fee.
  • computer network services such as the Internet, America On-Line, CompuServe and others having web sites with different types of applications ranging from general information to entertainment to electronic shopping, all of which can be accessed for a fixed monthly fee.
  • IPPV impulse pay-per-view
  • Such "impulse pay-per-view" (IPPV) services include television movies or special sports events in which a viewer can order a service upon payment of a fee.
  • the provision of pay-per-view services is desirable from a consumer's standpoint since the consumer need only pay for those services which are desired and offered at times that the consumer is able to enjoy them.
  • pay-per-view services whether they be movie or sports events, has prompted system operators and programmers to consider additional types of services to be offered using the pay-per-view approach.
  • One outgrowth of the pay-per-view approach would be the ability to offer services based on data and multimedia applications.
  • Such services may include, without limitation, games or information accompanying the television programming, home-shopping, e-mail services, and the like.
  • acceptable security measures must be implemented.
  • CA conditional access
  • IPPV conditional access to services based on new applications. It would be particularly advantageous to extend such conditional access without requiring a new infrastructure to support these features, i.e., by providing simple extensions to already deployed systems. It would be further advantageous to enable subscriber terminals, such as set-top boxes previously used solely for video IPPV services, to provide "impulse pay per use” (IPPU) services for applications other than video or accompanying the video.
  • IPPU impulse pay per use
  • the present invention provides methods and systems having the aforementioned and other advantages .
  • a method and system are provided for allowing secure impulse pay-per-use (IPPU) services to be obtained over a communication network.
  • IPPU secure impulse pay-per-use
  • a subscriber IPPU selection is sent by a subscriber (e.g., via telephone in the case of call-ahead entitlement or via the subscriber terminal in the case of pre-authorized entitlement) to an access controller.
  • the access controller generates an encrypted message having a service identifier and associated authorization settings related to the subscriber IPPU selection, which encrypted message is then sent from the access controller to the subscriber terminal, together with the cost of the IPPU service selected by the subscriber.
  • the subscriber terminal verifies that the cost of the IPPU selection is within a credit entitlement of the subscriber.
  • the subscriber terminal If such verification is successful, the subscriber terminal generates a secure entitlement token for use by a client application residing in the subscriber terminal.
  • the entitlement token may alternatively be generated by the access controller and forwarded to the subscriber terminal.
  • the client application will then send the entitlement token to a server (e.g., a proxy/policy server) in a secure manner in order to determine the status of the subscriber's entitlement to receive the IPPU selection. If the subscriber's entitlement to receive the IPPU selection is verified, the server will further process the IPPU selection for further enabling the selected service/application for use by the viewer.
  • a server e.g., a proxy/policy server
  • the server can be an independent Internet Service Provider (ISP) proxy/policy server, an ISP proxy/policy server affiliated with a Multiple System Cable Operators' (MSO) or other Network Operators' (NO) proxy/policy/policy server, a NO proxy/policy/policy server, or the like.
  • ISP Internet Service Provider
  • MSO Multiple System Cable Operators'
  • NO Network Operators'
  • the IPPU selection is first sent to a customer response center (CRC) /billing system, which in turn forwards the IPPU selection to the access controller.
  • CRC customer response center
  • the billing system bills the subscriber for the IPPU selection.
  • CRC/billing system via a web browser running at the subscriber terminal and a web server at the billing system.
  • the billing system can actuate the access controller to add the service referred to by the subscriber IPPU selection, which is a separate process from that which tells the access controller which subscribers are entitled to access the service.
  • the term "billing system" as used herein, as well known in the industry, is much broader than just a billing computer.
  • the billing system refers to the business system that runs the Network Operator operation, and includes functions such as billing, system configuration and business operations.
  • the secure entitlement token is a signed and encrypted entitlement token, which signed and encrypted entitlement token is securely sent from the client application to the server for authentication and decryption.
  • the entitlement token may be encrypted using, for example, the subscriber's private key.
  • the proxy/policy server can then use the subscriber's public key to decrypt the entitlement token.
  • the token may be encrypted using symmetric key encryption methods.
  • the token may be encrypted using Data Encryption Standard (DES) techniques, and sent along with the DES key which is encrypted using a public key associated with the server (DES is an encryption standard which is described in US patent no. 3,962,593).
  • DES is an encryption standard which is described in US patent no. 3,962,593
  • the server uses its private key to decrypt the DES key and uses the decrypted DES key to decrypt the token.
  • the entitlement token may be generated at the access controller or at the subscriber terminal.
  • the service identifier is associated with one or more service related codes and data objects which are sent periodically from the access controller to the subscriber terminal.
  • the access controller may be a local access controller or a national access controller.
  • the IPPU services may consist of accessing certain cites, streaming media from the sites, downloading multimedia applications from the sites, accessing content resident on the sites, shopping, email, video mail, or the like.
  • the subscriber terminal may be a cable television set-top box, a digital television or host with point of deployment capability, a personal computer, or the like.
  • the subscriber IPPU selection is pre-authorized at the subscriber terminal for a predetermined credit amount.
  • Pre-authorization for IPPU allows a subscriber to request authorization locally (e.g., in the subscriber terminal) .
  • the subscriber terminal can subtract the cost associated with the subscriber IPPU selection from the credit amount .
  • the subscriber terminal can securely report the subscriber IPPU selection back to the access controller.
  • FIG. 1 is a block diagram of the system in accordance with the present invention.
  • FIG. 2 is a block diagram of the relevant components of a subscriber terminal in accordance with the present invention.
  • impulse pay-per-view concept previously associated with television services is extended to impulse pay-per-use (IPPU) services associated with supplementary data and multimedia applications and the like.
  • IPPU impulse pay-per-use
  • use refers to the act of utilizing either subscriber terminal resources or code/data objects. Such objects comprise software code and/or data, and may be resident in the subscriber terminal or downloaded.
  • the invention securely entitles subscribers to purchase services on impulse. Such services may or may not rely on real time interaction with the network for delivering the service.
  • a secure microprocessor in the subscriber terminal is provided with hardware and/or software to enable the secure processor to generate an entitlement token which is secure and signed, and may be used by the ISP's or NO's proxy/policy server prior to further processing by a server associated with a given service.
  • the token is generated when a subscriber either selects a service (if pre-authorized) or purchases such a service on impulse.
  • Such an IPPU purchase will utilize components resident in the subscriber terminal as well as applicable network components that support IPPU purchase transactions.
  • Various system elements are used in providing IPPU services in accordance with the invention. These include :
  • CRM Customer Response Center
  • CSR Service Representative
  • NO-BS Existing Network Operator Billing System
  • the existing NO billing system interfaces to a national controller (Access Controller-AC) or a local controller (Digital Access Controller-DAC) .
  • Access Controller-AC Access Controller-AC
  • Digital Access Controller-DAC Digital Access Controller-DAC
  • access requirements and authorization rights (entitlements) are conveyed from the Billing System.
  • ISP-BS Internet Service Provider Billing System
  • ISP Internet Service Provider Billing System
  • AC/DAC Access controllers which control the authorization and purchase collection of services on a subscriber basis .
  • Subscriber terminal A device such as a cable television set-top box, a digital television or host with point of deployment capability, a personal computer, or the like that offers video, audio and data services based on subscription, call -ahead, or impulse pay.
  • the subscription and impulse tiers within the conditional access system are associated with service- identifiers which themselves may be associated with one or more service related code and data objects. These objects are carouseled (i.e., sent periodically) on either the out-of-band or a given in-band channel which corresponds to the offered service.
  • the authorization tier is conveyed in an encrypted message and delivered as such to a secure processor in the subscriber terminal .
  • IPPU IP-based resource provisioned by a consumer. If a consumer wishes to purchase a service marked as IPPU, and if he possesses the authorization tier that enables IPPU purchase in general, and if the network has granted him adequate credit, then the consumer can command the purchase directly to the subscriber terminal without the involvement of the network. The subscriber terminal will later report this purchase back to the network in a secure manner, either when requested or autonomously.
  • the server based applications scenarios are more involved. This is due to the fact that certain actions are required by the server (or proxy server) in order to facilitate the use of the selected service/application by the viewer. Such services may include, for example, accessing certain sites, downloading programs from these sites, or accessing content (e.g. streaming media content) resident on these sites.
  • the policy/proxy server requires a secure mechanism to determine whether the subscriber is legitimately entitled to the selected service. The mechanism must be secure to guard against workarounds where a purchase is not registered but an entitlement token (encrypted, signed or otherwise) shows that the subscriber is entitled for a sought after service.
  • the set of impulse-purchasable services (e.g., multimedia applications, home shopping, e-mail, and the like) are associated with corresponding service- identifiers (service_id) that are recognized by both the NO's and the ISP's billing systems.
  • Call ahead service tiers and/or IPPU tiers are associated with each service for each subscriber.
  • Each service_id may have a non zero cost associated with it.
  • a subscriber IPPU selection is sent by a subscriber to an access controller 14 (e.g., via telephone in the case of call-ahead entitlement or via the subscriber terminal in the case of pre-authorized entitlement) .
  • the access controller 14 generates an encrypted message having a service identifier and associated authorization settings (e.g., authorization tier settings) related to the subscriber IPPU selection, which encrypted message is then sent from the access controller 14 to the subscriber terminal 16.
  • the same message (or a separate message) may include the corresponding cost of the IPPU selection.
  • the subscriber terminal 16 verifies that the cost of the IPPU selection is within a credit entitlement of the subscriber. If such verification is successful, the subscriber terminal 16 generates (e.g., by a secure processor located in the subscriber terminal) a secure entitlement token for use by a client application residing in the subscriber terminal 16.
  • the entitlement token may be generated by the access controller 14 and forwarded to the subscriber terminal 16.
  • the client application will then send the entitlement token to a server 18 in a secure manner in order to determine the status of the subscriber' s entitlement to receive the IPPU selection. If the subscriber's entitlement to receive the IPPU selection is verified, the server 18 will further process the IPPU selection to facilitate the use of the service/application by the viewer.
  • the server 18 can be an independent Internet Service Provider (ISP) proxy/policy server, an ISP proxy/policy server affiliated with a Network Operators' (NO) proxy/policy/policy server, a NO proxy/policy/policy server, or the like.
  • ISP Internet Service Provider
  • NO Network Operators'
  • the IPPU selection is first sent to a customer response center (CRC) /billing system 12, which in turn forwards the IPPU selection to the access controller 14.
  • CRC customer response center
  • the billing system 12 bills the subscriber for the IPPU selection.
  • the CRC may be a part of the NO billing system as shown in Figure 1, or the CRC may be a separate entity.
  • the CRC informs the billing system of the call -ahead (or cyber) subscriber selections and sends that information to the NO billing system (NO-BS) .
  • NO-BS NO billing system
  • the subscriber IPPU selection can be sent to the CRC/billing system 12 via a web browser running at the subscriber terminal 16 and a web server at the billing system 12.
  • the server may also inform the ISP's billing system 20 (ISP-BS) about the purchase transaction.
  • ISP-BS ISP's billing system 20
  • NO systems where there is one NO billing system for all services, the ISP's billing system 20 is actually part of or the same as the NO's billing system 12.
  • the subscriber terminal 16 may subtract a subscription fee associated with IPPU (one time purchase until terminated) , and the ISP-BS 20 may charge an additional transaction fee.
  • the subscriber terminal 16 may only register the purchase and convey the entitlement (as mentioned above) with no charge.
  • the ISP's billing system 20 may then apply the charge.
  • the billing system 12 can actuate the access controller 14 to add the service referred to by the subscriber IPPU selection, which is a separate process from that which tells the access controller 14 which subscribers are entitled to access the service.
  • the term "billing system” as used herein, as well known in the industry, is much broader than just a billing computer. Generally, the billing system refers to the business system that runs the NO operation, and includes functions such as billing, system configuration and business operations.
  • the secure entitlement token is a signed and encrypted entitlement token, which signed and encrypted entitlement token is securely sent from the client application to the server 18 for authentication and decryption.
  • the entitlement token may be encrypted using, for example, public key/private key methods and/or DES encryption methods.
  • the subscriber terminal 16 will pass the encrypted entitlement token on to the server 18 for determination of entitlement.
  • the entitlement token may be generated at the access controller 14 or at the subscriber terminal 16.
  • the service identifier is associated with one or more service related codes and data objects which are sent periodically from the access controller 14 to the subscriber terminal 16.
  • the access controller 14 may be a local access controller or a national access controller.
  • the IPPU services may consist of accessing certain sites, streaming media from the sites, downloading multimedia applications from the sites, accessing content resident on the sites, shopping, email, video mail, or the like.
  • the subscriber terminal 16 may be a cable television set-top box, a digital television or host with point of deployment capability, a personal computer, or the like.
  • the subscriber IPPU selection is pre-authorized at the subscriber terminal 16 for a predetermined credit amount.
  • Pre- authorization for IPPU allows a subscriber to request authorization locally (e.g., in the subscriber terminal 16) .
  • the subscriber terminal 16 can subtract the cost associated with the subscriber IPPU selection from the credit amount .
  • the subscriber terminal 16 can securely report the subscriber IPPU selection back to the access controller 14.
  • Figure 2 provides an example of the processing that takes place at the subscriber terminal 16 in a particular embodiment.
  • the subscriber terminal 16 receives the encrypted message from the access controller 14 as discussed in connection with Figure 1.
  • the encrypted message or a separate message may include the corresponding cost of the IPPU selection.
  • a secure processor 32 located in the subscriber terminal 16 then processes the encrypted message to verify whether the cost of the IPPU selection is within the credit entitlement of the subscriber. If such verification is successful, the subscriber terminal 16 then generates (e.g., by the same secure processor 32) a secure entitlement token for use by the client application 40.
  • the client application 40 is provided with this token by an application layer interface routine which will then send the entitlement token to the server 18 in a secure manner as discussed in connection with Figure 1. In this way, the server 18 can further validate the legitimacy of the subscriber's entitlement to the requested service. It also provides non-repudiation of the purchase transaction within the subscriber terminal, allowing the NO to have absolute visibility and control of the purchasable services.
  • the IPPU selection content is forwarded to the subscriber terminal 16 by the server 18 as discussed in connection with Figure 1.
  • the IPPU selection may be received by the secure processor 32 via a conventional receiver circuit (i.e. receiver output of Figure 2) .
  • the secure processor may further process the IPPU content (e.g., if the content associated with the selection is encrypted) .
  • Unencrypted content can then be processed in a conventional manner for display (e.g., by a demultiplexer/decoder 34 or by software in the subscriber terminal 16) .
  • a device memory 30 is provided to store local data related to the subscriber terminal 16 and/or purchases made therewith. This memory can also be used to store software and/or firmware associated with the subscriber terminal 16 as well as data being processed by the CPU 36, depending on the particular implementation chosen.
  • a subscriber terminal is provided with the ability to generate (e.g., by a secure processor located in the subscriber terminal) a signed and/or encrypted token to be used by a NO's or affiliated ISP proxy server to further validate the legitimacy of a subscriber's entitlement to a requested service or set of services offered by the NO or the affiliated ISP.
  • the invention also provides non-repudiation of purchase transactions via a subscriber terminal, thereby requiring a subscriber to pay for all IPPU services ordered.
  • An intended result is to provide NO's with absolute visibility and control of purchasable services.

Landscapes

  • Engineering & Computer Science (AREA)
  • Multimedia (AREA)
  • Signal Processing (AREA)
  • Business, Economics & Management (AREA)
  • Databases & Information Systems (AREA)
  • Accounting & Taxation (AREA)
  • Computer Security & Cryptography (AREA)
  • Finance (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Human Computer Interaction (AREA)
  • Computer Graphics (AREA)
  • Development Economics (AREA)
  • Economics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

La présente invention concerne un procédé et un système permettant l'achat-réflexe de services via un réseau de communications tel qu'un réseau de télévision par câble ou satellite. Les services concernés sont essentiellement des informations ou des jeux accompagnant les émissions de télévision, le télé-achat, les services de courrier électronique, et les supports d'information à lecture et enregistrement en continu. La sécurité est assurée par un système d'autorisations produites par le contrôleur d'accès (14) et de jetons d'autorisation produits par un processeur sécurisé. Ce processeur sécurisé est implanté dans le terminal d'abonné (16) par lequel l'abonné se procure les services. Il y a production d'un jeton dès que l'abonné sélectionne le service s'il dispose d'une autorisation préalable ou dès qu'on prend un service par achat-réflexe. Le jeton, qui est sécurisé et signé, peut servir à un serveur de politique ou à un serveur mandataire (18) sous-tendu par le fournisseur de services Internet de l'exploitant de réseau et les services associés de favoriser encore plus l'offre de ces services aux abonnés.
EP00952474A 1999-08-17 2000-08-03 Procede et systeme de peage d'achat-reflexe de services informatiques et multimedia Withdrawn EP1206876A1 (fr)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US14926399P 1999-08-17 1999-08-17
US149263P 1999-08-17
PCT/US2000/021243 WO2001013635A1 (fr) 1999-08-17 2000-08-03 Procede et systeme de peage d'achat-reflexe de services informatiques et multimedia

Publications (1)

Publication Number Publication Date
EP1206876A1 true EP1206876A1 (fr) 2002-05-22

Family

ID=22529487

Family Applications (1)

Application Number Title Priority Date Filing Date
EP00952474A Withdrawn EP1206876A1 (fr) 1999-08-17 2000-08-03 Procede et systeme de peage d'achat-reflexe de services informatiques et multimedia

Country Status (8)

Country Link
EP (1) EP1206876A1 (fr)
JP (1) JP2003507803A (fr)
KR (1) KR20020035575A (fr)
CN (1) CN1174620C (fr)
AU (1) AU6516500A (fr)
BR (1) BR0013410A (fr)
CA (1) CA2381363C (fr)
WO (1) WO2001013635A1 (fr)

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE60213281T2 (de) * 2001-12-05 2007-06-28 France Telecom Verwaltungsverfahren zur bereitstellung eines zuganges zu einem verschlüsselten, auf einem netwerk zu übertragenen inhalt, sowie system und server zur durchführung dieses verfahrens
JP4817602B2 (ja) * 2002-03-08 2011-11-16 インターナショナル・ビジネス・マシーンズ・コーポレーション ペイ・パー・ユース公衆データ・アクセス・システムでの接続性の区別
US20030217163A1 (en) * 2002-05-17 2003-11-20 Lambertus Lagerweij Method and system for assessing a right of access to content for a user device
US20040009815A1 (en) * 2002-06-26 2004-01-15 Zotto Banjamin O. Managing access to content
CN100372303C (zh) * 2004-12-13 2008-02-27 华为技术有限公司 一种实现预付费用户上网策略动态改变的方法
CN100403794C (zh) 2004-12-29 2008-07-16 华为技术有限公司 一种实现流媒体业务的视讯终端和方法
CN101296420B (zh) * 2008-06-23 2011-07-20 腾讯科技（深圳）有限公司 一种防止免费使用付费游戏的方法、系统、服务器和终端
JP5718311B2 (ja) * 2009-03-26 2015-05-13 エックスペッド ホールディングス ピーティワイ リミテッド 装置間の無線通信を管理するための構成

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5003384A (en) * 1988-04-01 1991-03-26 Scientific Atlanta, Inc. Set-top interface transactions in an impulse pay per view television system
US5862220A (en) * 1996-06-03 1999-01-19 Webtv Networks, Inc. Method and apparatus for using network address information to improve the performance of network transactions
FI974091A7 (fi) * 1997-10-29 1999-04-30 Helsingin Puhelin Oyj Helsingfors Telefon Abp Menetelmä maksusuoritteiden välittämiseksi Internet-verkossa

Non-Patent Citations (3)

* Cited by examiner, † Cited by third party
Title
JOURNAL ARTICLE: "Functional Model of a Conditional Access System", EBU TECHNICAL REVIEW, no. 266, 21 December 1995 (1995-12-21), BRUSSELS, BE, pages 64 - 77, XP000559450 *
See also references of WO0113635A1 *
STOW R.G.; HILLIER P.V.: "Eurocrypt - a versatile conditional access system for MAC broadcasts", IEEE, 6 June 1989 (1989-06-06), pages 278 - 279, XP010085489 *

Also Published As

Publication number Publication date
CA2381363C (fr) 2009-02-03
CN1174620C (zh) 2004-11-03
CN1378743A (zh) 2002-11-06
WO2001013635A1 (fr) 2001-02-22
KR20020035575A (ko) 2002-05-11
JP2003507803A (ja) 2003-02-25
BR0013410A (pt) 2002-06-25
CA2381363A1 (fr) 2001-02-22
AU6516500A (en) 2001-03-13

Similar Documents

Publication Publication Date Title
US6810525B1 (en) Impulse pay per use method and system for data and multimedia services
US6055314A (en) System and method for secure purchase and delivery of video content programs
JP4409940B2 (ja) 取引データをキャプチャするための双方向情報サービスシステムおよび関連する方法
US20050066353A1 (en) Method and system to monitor delivery of content to a content destination
AU2007237159B2 (en) Methods and systems to distribute content via a network utilizing distributed conditional access agents and secure agents, and to perform digital rights management (DRM)
CA2488844C (fr) Systeme de controle d'acces et de gestion des cles pour contenus multimedias diffuses en flux continu
US8804956B2 (en) Method and device for the partial encryption of a digital content
KR100426740B1 (ko) 방송 서비스를 위한 전체적인 조건부 액세스 관리 방법
US20050021467A1 (en) Distributed digital rights network (drn), and methods to access operate and implement the same
CA2402216C (fr) Procede, systeme de communication, et dispositif de reception pour la facturation de programmes et/ou de donnees a acces controle d'emetteurs de diffusion
US20040168184A1 (en) Multiple content provider user interface
KR20030020952A (ko) 멀티미디어 콘텐트를 나타내는 디지털 데이터의 안전한분배 방법
JP2001512842A (ja) 条件付きアクセスシステムにおいて使用される暗号化装置
CA2381363C (fr) Procede et systeme de peage d'achat-reflexe de services informatiques et multimedia
US20200068175A1 (en) Method and apparatus for supporting multiple broadcasters independently using a single conditional access system
JP2004201275A (ja) 取引システム
AU2001290653B2 (en) A distributed digital rights network (DRN), and methods to access, operate and implement the same
US20060059506A1 (en) Conditional access system for digital television content based on prepayment and optimisation of the bandwidth of the channel broadcasting said content
HK1050978A (en) Impulse pay per use method and system for data and multimedia services
AU2007234610B2 (en) Methods and systems to distribute content via a network utilizing distributed conditional access agents and secure agents, and to perform digital rights management (DRM)
AU2007234627B2 (en) Methods and systems to distribute content via a network utilizing distributed conditional access agents and secure agents, and to perform digital rights management (DRM)
WO2019018431A1 (fr) Procédé et appareil de prendre en charge de multiples diffuseurs indépendamment à l'aide d'un système d'accès conditionnel unique

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20020306

AX Request for extension of the european patent

Free format text: AL;LT;LV;MK;RO;SI

RBV Designated contracting states (corrected)

Designated state(s): DE FR GB NL

17Q First examination report despatched

Effective date: 20050425

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION HAS BEEN WITHDRAWN

18W Application withdrawn

Effective date: 20060419

P01 Opt-out of the competence of the unified patent court (upc) registered

Effective date: 20230520