EP2721795A1

EP2721795A1 - Method and apparatus for authenticating users of a hybrid terminal

Info

Publication number: EP2721795A1
Application number: EP11725929.1A
Authority: EP
Inventors: Matthias Wagner; Andreas KARANAS
Original assignee: TEVEO INTERACTIVE GmbH
Current assignee: TEVEO INTERACTIVE GmbH
Priority date: 2011-06-16
Filing date: 2011-06-16
Publication date: 2014-04-23
Also published as: DE112011104670A5; US20140137223A1; CA2839231A1; AU2011370755A1; WO2012171568A1; WO2012171568A8; RU2013157400A; KR20140053913A; BR112013032270A2; CN103765843A; JP2014524072A; MX2013014618A

Abstract

The invention relates to a method and an apparatus for authenticating users of a hybrid terminal (10), comprising the generation of a unique registration code (15) and a profile file (19), at least one registration step comprising the inputting of user identification data (14), the inputting and transmission of a personal identification number (16) from the Internet-enabled terminal (11) to a registration server, the transmission of the user identification data (14) relating to the user from the Internet-enabled terminal (11) to the registration server, the inputting of the unique registration code (15), the validation of the user identification data (14) and, if the user identification data (14) correspond to a user reference data record, the assignment to the profile file (19), and, if the personal identification number (16) has not been input by the user, the generation and transmission of the personal identification number (16) from the registration server to the user, and an authentication step comprising a check in order to determine whether the profile file (19) is present in the hybrid terminal (10) and, if so, the carrying out of authentication, otherwise the carrying out of initial authentication, and, if initial authentication reveals that the user is authorized, the generation and transmission of the profile file (19) from the authentication server to the hybrid terminal (10), and, after the initial authentication or authentication has been carried out, the transmission of an enable message to at least one of the service providers (17, 18).

Description

Method and device for authenticating users of a

hybrid terminal

Besehreibung

The present invention relates to a method and a device for

Authentication of users of a hybrid terminal.

Such methods are used for registration and authentication of a user of televisions and satellite receivers, in addition to the actual

Reception for television programs via an additional Internet interface.

Known methods and devices for the authentication of television users.

The publication DE 10 2006 045 352 A1 discloses a single sign-on method for the use of a set-top box with an Internet and a broadband interface. By means of a registration provided by a provider and

Authentication function, user authentication occurs after powering on a set-top box. If the user successfully authenticates, the

Provider an authentication information to the set-top box. These

Authentication information is then sent to the registry for registration

Service providers or multiple service providers. The application and

Authentication function is called after switching on the set-top box and if the authentication is successful, an authentication information to the

Set-top box sent. This authentication information is in turn sent to a service provider by means of the set-top box and the set-top box is thus registered with this service provider. Subsequently, a comparison takes place between the service provider and the provider of the logon and authentication function for verification of the authentication information and possibly the transmission of a corresponding confirmation from the provider of the authentication function to the service provider. The document US 2008/0141296 AI shows a method for accessing an authentication server for a digital Mietfemsehsystem. Once the television, which has both an Internet connection and a digital TV receiver, is turned on, it contacts an authentication server to determine if the user is a co-service participant. Only after a release by the

Scrvice provider by means of the authentication server, the user can access the digital television offering.

Another method can be found for example in the document US 2008/0127254 AI. To determine if the user of a television is familiar with the television, i. Whether identification data of the user is present in the TV is used to identify the user from a wireless

Communication device, which is within sight of the TV, transmitted to the TV. In this case, the data required for identifying the user are already present or stored on the communication device. The received data is matched in the TV with stored user profiles to subsequently control the TV accordingly.

The method has the disadvantage that the data required for the identification and authentication of a user are stored on the wireless communication device, so that an authentication of the user can always be carried out only by means of the associated communication device. This is complicated to handle and expensive. If the wireless communication device is used by third parties, the user whose identification data is stored on the wireless communication device is not identified and authorized, but the user.

The object of the present invention is therefore to propose a secure method that simplifies the handling of the authentication. Furthermore, it is an object of the invention to provide a corresponding device for carrying out the

Specify method.

This object is achieved by a method having the features of claim 1. The inventive method has the advantage that the authentication of users , - A hybrid terminal by means of a user assigned to the unique registration code and a personal identification number. A particular advantage of the method according to the invention is that the user can initiate an authentication process directly on the hybrid terminal. Would the user like to access services and / or content that was a previous one

Require authentication, the user can request and obtain a unique registration code directly via the hybrid terminal, without first having to register via an Internet-enabled computer, for example. Furthermore, the inventive method has the advantage that the user of the hybrid terminal only a single application - hereinafter referred to as "single-sign-on" - is required to identify to one of the service providers or against several of the Dienstan- bictern. After successful authentication of the user, the latter can not only access the user data or contents of one of the service providers, but is in principle also legitimized for the transmission of user data or the access to contents of other service providers.

According to a preferred development of the method, the generation of the unique registration code comprises the following steps: sending a request message from the hybrid terminal to the registration server of the authentication device for requesting the unique registration code, generating the requested registration code by means of the registration server of the authentication device and transmitting the unique registration code from the registration server of the

Authentication device to the hybrid terminal. This offers the advantage that the registration code is generated independently of the respective hybrid terminal in that the user at the hybrid terminal initiates the generation of the registration code, for example by pressing a key. The hybrid terminal then sends a request message to the registration server of the authentication device to signal to it that a unique registration code is to be generated. Then, by means of the registration server of the authentication device, the respective unique registration code is generated. The unique registration code is unique and unmistakable, ie the generation of two identical codes is avoided in any case. Subsequently, the generated unique registration code is transmitted from the registration server of the authentication device to the hybrid terminal. A further preferred development of the method is characterized in that the generation of the unique registration code takes place by means of the hybrid terminal. This offers the advantage that the registration code can be generated locally by means of the hybrid terminal, without the registration code first being issued by the registration server

Authentication device must be transmitted to the hybrid terminal.

An expedient embodiment of the invention is characterized in that performing the initial authentication comprises: inputting the unique registration code and the personal identification number by means of the hybrid terminal,

Transmitting the unique registration code and the personal identification number to an authentication server of the authentication device via the internet interface of the hybrid terminal, checking the unique registration code and the personal identification number in the authentication server of the authentication device by matching the unique registration code and the personal identification number with the user identification data of the users who stored on the storage medium of the authentication device, and if the checking reveals that the unique registration code and the personal

Identification number one of the users are assigned. Determining that this user is authorized to receive the payload from the service provider and / or to send the payload to the service provider. For the first time, the user accesses the user data of one of the service providers. this must first be legitimized by means of the first authentication for access to the user data of the service provider. The

Legitimization of whether the user is authorized to retrieve the payload data from the service provider is made by entering the unique registration code and the personal identification number. The first authentication is thus set up in the form of a two-factor authentication and thus represents a particularly secure method for the first authentication of the user. A preferred development of the invention is characterized in that performing the authentication comprises: transmitting the profile file that is stored on the Hybrid terminal is stored on the authentication server of the authentication device via the Internet interface of the hybrid terminal, checking the Profi Ifile in the Authenti fication server of Authenti fizierungsvorrichtung by adjusting the Profile file containing the user identification data of the users stored on the storage medium of the authentication device, and if the checking reveals that the profile file is attributable to one of the users, determining that this user is to receive the payload from the service provider and / or to send the payload - Data is authorized to the service provider. This offers the advantage that when repeated

Access of the user to one of the service providers or whose user data no further input by the user for authentication is required. The legitimation of the user to the service provider is done by transmitting and checking the profile file. This process is hidden from the user while accessing the service provider's payload. So it is also possible on the

Accessing other service providers' payloads without prompting the user to actively authenticate.

According to a further preferred embodiment of the invention performing the authentication comprises: inputting the personal identification number by means of the hybrid terminal, transmitting the profile file stored on the hybrid terminal, and the personal identification number to the authentication server of the authentication device via the internet interface of the hybrid terminal, checking the personal Identification number and the profile file in the authentication server of the authentication device by matching the personal identification number and the profile file with the user identification data of the users stored on the storage medium of the authentication device, and if the checking reveals that the personal identification number and the profile file are assignable to one of the users , Determining that this user is to receive the payload data from the service provider and / or to send the N user data is authorized at the service provider. The additional input of the personal identification number offers the advantage of increased security of authentication of the user. If, for example, the user accesses paid content or content that serves to process the purchase, the user is informed on the one hand by the request to enter the personal identification number that he may incur further costs in the following. On the other hand, it ensures that the user does not unintentionally access these specific content or inadvertently make purchases. A further expedient embodiment of the invention is characterized in that the communication between the Internet-enabled terminal and the authentication device takes place via a secure Internet network connection by means of a secure hypertext transmission protocol. In this way, the communication between the internet terminal and the authentication device becomes unwanted

Interception and spying by third parties effectively protected.

According to another preferred embodiment, the unique registration code comprises only numeric characters. Thus, the character set for inputting the registration code by the user is limited only to the numbers 0, 1, 2, 3, 4, 5, 6, 7, 8 and 9, so that the entry of the unique registration code is much easier due to the limited character set becomes. In a particularly preferred embodiment, the entry of the unique registration code and the personal identification number takes place by means of a remote control of the hybrid terminal. The unique registration code and personal identification number can therefore be conveniently entered using the number buttons on the remote control.

A further expedient embodiment of the invention is characterized in that the user data comprise at least substantially video data and / or audio data. In addition, as already described above, the payload includes further control data, namely additional data in addition to the actual audio and video data, which ensure a linkage of the transmitted audio and video data with contents of the Internet. According to a further embodiment, the user data comprise communication and release data, which serve, for example, for the purchase transaction. The user accesses content from service providers who use an online store to purchase items or

Provision of services, the purchase is carried out by the transmission of appropriate communication and release data via the broadband interface.

The object is also achieved by a device having the features of claim 13. The resulting benefits have already been linked to the

Describe method. To avoid repetition, reference is therefore made to the corresponding passages of the description. Both for the method according to the invention and for the device according to the invention, it may be advantageous for the hybrid terminal to be designed as a Hybrid Broadcast Broadband TV (HbbTV) hybrid terminal as described in the draft technical specification TS 102 796 VI .1.1 (2009-). 12) - hereafter referred to as HbbTV standard - is defined more closely by the European Telecommunications Standards Institute 2009. According to the HbbTV standard, a platform for the signaling, transport and presentation of advanced and interactive applications for operation on hybrid terminals is defined Such hybrid terminals are preferably television sets, satellite receivers, cable television receivers, set-top boxes, or the like, so the hybrid terminal communicates both over the

Internet interface as well as the broadband interface. If the hybrid terminal is designed, for example, as an extended television set or set-top box, the hybrid terminal receives, in addition to the user data in the form of audio and video data, additional information via the broadband interface, for example in the form of an embedded one

Internet address, which is a link of the television signal with information and

Allow for value-added services that can be accessed via the Internet. By means of this additional information, it is possible to use the InterSchnittstelle of the

Hybrid terminal to communicate with the Internet and specifically access content on the Internet, which are linked to the transmitted via the broadband interface payload. The transmission of the user data preferably takes place unidirectionally, for example starting from a television transmitter to the hybrid terminal. The

Broadband site is therefore preferred as DVB-S. DVB-S2, DVB-T or DVB-C interface designed. However, the broadband interface is not limited to the reception of television signals in accordance with the aforementioned DVB standards, but is basically adapted and arranged to receive television signals in accordance with other conventional television signal transmission methods.

Further preferred or expedient features and embodiments of the invention will become apparent from the subclaims and the description. Particularly preferred embodiments will be explained in more detail with reference to the accompanying drawings. The drawing shows:

1 shows schematically the sequence of a first regi stri erungsschritts, - -

FIG. 2 schematically illustrates performing an initial authentication; FIG.

Fig. 3 schematically shows the passage of a Authenti fication, and

Fig. 4 is a schematic diagram of the device according to the invention.

The sequence of the first registration step shown in FIG. 1 is preceded by the following steps, not shown in FIG. First, each one becomes unique

Registration code 15 and a profile file 19 generated, and the profile file 19 associated with the respective registration code 15. The unique registration code 15 is uniquely designed, so that each generation generates one of the unique

Registration codes 15 each other unique registration code 15 is generated. The professional file 19 associated with the unique registration code 15 is then stored on the hybrid terminal 10, i. on the hybrid terminal 10 or a the

Hybrid terminal 1 associated memory device stored. The unique

The registration code 15 is output via the hybrid terminal 10 so as to be displayed to the user. Preferably, the user notes the displayed unique registration code 15 for further use. The output of the unique registration code 15 may, for example, be made via a screen connected to the hybrid terminal 10. Alternatively, the display of the

Registration code 15 directly on the hybrid terminal 10, for example via a separate display.

According to the first register section shown in FIG. 1, the user of the flybridge terminal 10 subsequently inputs his user identification data 14 by means of an Internet-capable terminal 11. For inputting the user identification data 14, any customary Internet-capable terminal is suitable, for example a laptop, a desktop computer, a PDA, an internet-capable mobile telephone or the like. The input of the user identification data 14, which is, for example, personal data such as name, address, bank details or credit card data of the user, are transmitted from the Internet-enabled terminal 11 via a first Internet connection 12 to a registration server of an authentication device 13. To make sure that the first Internet connection 12 is tap-proof and , , secured against interference from the outside, the communication between the Internet-enabled terminal 11 and the authentication device 13 is advantageously via a secure Internet connection using a secure hypertext transmission protocol (HTTPS protocol). Alternatively, the communication between the Internet-enabled terminal 11 and the authentication device 13 can also be unsecured or else by means of other encryption methods.

Furthermore, the user is prompted to enter a personal identification number 16. The personal identification number 16 is freely selectable by the user, i. the user can enter the personal identification number 16 after his

Set as desired. Entering the personal identification number 16 also takes place by means of the Internet-enabled terminal 11. Here, the user has the choice of whether he wants to dial the personal identification number 16 itself. If the user follows the request to input the personal identification number 16, the personal identification number 16 will become after entering the internet

Terminal 11 is transmitted to the registration server of the authentication device 13 via the first Internet connection. On the other hand, if the user does not follow the request to enter the personal identification number 16, the personal

Identification number 16 generated in a step described below. In other words, in the case where the user sets the personal identification number 16 himself and inputs it by means of the Internet-enabled terminal 11, the personal identification number 16 as well as the user identification data 14 from the Internet-enabled terminal 11 is sent to the registration server of the authentication device via a first Internet connection 12 13 transmitted. If the user does not enter a personal identification number 16, only the transmission of the

User identification data 14. The personal identification number 16 is subsequently generated in the authentication device 13.

After transmitting the user identification data 14 of the user from the

Internet-enabled terminal 1 1 to the registration server of the authentication device 13 via the first Internet connection 12, the user is prompted to enter the unique registration code 15 by the internet-prone terminal 11. The entered unique registration code 15 is then followed by the - - Internet-capable terminal 1 1 to the registration server of the authentication device 13 transmitted.

The user identification data 14 is then validated by comparing the user identification data 14 with a given user reference record. The user reference record includes information used to verify the identity of the user based on the one present on the registration server

User identification data 14 are suitable. In other words, the user reference data record is adapted to the user identification data 14 to be checked. For example, this includes information for checking account information

The creditworthiness of the user or for checking the credit card data corresponding control data, which are required to determine whether the present user identification data 14 a valid credit card.

Of course, the user reference record may also be used for age verification or simply for determining the actual identity of the user.

In the case where the user identification data 14 corresponds to one of the predetermined user reference data sets, the user's user identification data 14 is stored on a storage medium of the authentication device 13. The user identification data 14 are thus permanently secured and at any time in the

Authentication device 13 available. The storage medium used are all the usual known storage technologies. Furthermore, the professional file 19 is assigned to the respective user. In other words, a correspondence is established between the profile file 19 and the user, which allows the identification of the user via the professional file 19.

If the user has not previously entered a personal identification number 16, the personal identification number 16 is subsequently generated. Based on the unique registration code 15 and the personal identification number 16, the user is uniquely identifiable, ie the unique registration code 15 and / or the personal identification number 16 are User assigned. Preferably, the unique registration code 15 includes a 16-digit numeric hash value that is generated based on the user identification data 14. The generation of the hash value allows the later execution of a plausibility check. about the correctness of the - - to be able to check the unique registration codes 15. Of course, the unique registration code 15 is not limited to 16-digit numerical flash values only, but may be any registration code length.

The personal identification number 16 is transmitted from the registration server to the user or to the internet-capable terminal 11 in a separate way.

For example, the user is sent the personal identification number 16 by email or SMS. It is also possible to transmit the personal identification number 16 not by electronic means, but by post. In any case, the

Therefore, it is also possible to transmit both the personal identification number 16 and the unique registration code 15 exclusively via the first internet connection 12. However, such a transmission takes place offset in time such that when the first Internet connection 12 is being listened to, an unauthorized third party at the same time receives neither knowledge of the unique registration code 15 nor of the personal identification number 16. This avoids unauthorized third parties not being aware of the unique registration code 15 or the personal identification number 16. Thus, a misuse by unauthorized third parties is largely excluded.

As soon as the user wants to access a service provider 17, 18, ie the user wants to obtain user data from a service provider 17, 18 or wants to use services of a service provider 17, 18, it is first determined whether the user is accessing the service provider 17 , 18 is entitled. This check takes place in the authentication step described below.

For this purpose, it is checked whether the profile file 19 is present on the hybrid terminal 10, wherein the hybrid terminal 10 communicates via the Internet interface with an application server of Authcntifizierungsvorrichtung 13. The user tries on one

Service providers 17, 18, the application server begins with the check whether a user file associated with the profile file 19 is present on the hybrid terminal. Thus, it is determined whether the user has previously accessed an authentication-requiring service provider 17, 1 8. The profile file 19 is available as a cookie or as a client - -

Server certificate formed so that based on the profile file 19, the user is uniquely identifiable.

In the event that on the hybrid terminal 10, the profiled file 19 associated with the user is present, an authentication is carried out to determine whether the

User is authorized to receive payload data from the service provider 17, 18. The authorization of the user presupposes that this has been identified in the registration step and the user has been assigned a registration code 15 generated for the purpose of unambiguous identification as well as a personal identification number 16. If no profile file 19 assigned to the user is present on the hybrid terminal 10, the initial authentication is carried out to determine whether the user is authorized to receive the user data from the service provider 17, 18 and / or to send the user data to the service provider 17, 18 , If the initial authentication indicates that the user is authorized, i. for receiving the payload data from the service provider 17. 18 and / or legitimized for sending the payload data to the service provider, the profile file 19 assigned to the user is generated. The profile file 19 is transmitted from the authentication server of the authentication device 13 to the hybrid terminal 10 and stored on the hybrid terminal 10, i. permanently on the

Hybrid terminal 10 stored. The profile file 19 is also maintained via a restart of the hybrid terminal 10 and over longer periods without current. In other words, the presence or absence of the profile file 19 on the hybrid terminal 10 recognizes whether the user as an authorized user has previously accessed a service provider 17, 18 or whether it is the first access to one of the service providers 17. 18 acts.

Upon completion of authentication or initial authentication and determination that the user is an authorized user, a release message is transmitted to one or more service providers 17, 18. By means of the release message, the service provider 17, 18 is signaled that the user has authenticated himself as the authorized user for access to the services of the service provider 17, 18. The release message is transmitted via the second Internet connection 20 from the authentication device 13 to the service providers 17, 18. In return, the user data is transmitted by the service provider 17, 18 via the broadband interface to the hybrid terminal 10. The transmission of user data is not _ "Limited only to a transmission of user data from the service provider 17, 18 to the hybrid device 10. Alternatively, the transmission also includes the transmission of data or user data from the hybrid terminal 10 to the service provider 17, 18. This is for example the case when the user via the service provider 17, 18 fee-based services claims, for example, the purchase of goods over the service provider 17, 18.

According to a preferred development of the invention, the generation of the unique registration code 15 takes place by means of the registration server of the authentication device 13. This process is initiated by sending a request message from the hybrid terminal 10 to the registration server of the authentication device 13, for example by selecting a corresponding menu item in the menu of the hybrid terminal 10. Alternatively, the transmission process can be triggered via a button on the hybrid terminal 10 or on the remote control. Upon receipt of the request message, the registration server uses the

Authentication device 13, the unique registration code 15 generated and in the

Connection from the registration server to the hybrid terminal 10 transmitted.

A further preferred embodiment of the invention is characterized in that the unique registration code 15 is generated by means of the hybrid terminal 10. In other words, the generation of the unique registration code 15 is not performed by the registration server as described above, but locally on the hybrid terminal 10. The generation of the unique registration code 15 can be based on certain hardware features of the hybrid terminal 10 as well as independently hardware features. In the case of hardware-bound generation of the unique registration code 15, the registration code generation becomes unique

Characteristics of the hybrid terminal 10, for example, to a unique serial number of the hybrid device 10 or the like, bound. Of course, any other hardware feature of the hybrid terminal 10 that allows the generation of the unique registration code 15 is also suitable. Alternatively, the generation of the unique

Registration codes 15 independent of hardware features of the hybrid terminal 10. Thus, the registration code generation, for example, by means of any

mathematical methods, provided that ensure that the unique registration code 15 generated in each case is unique. - -

A preferred embodiment of the invention is shown in Fig. 2, which schematically illustrates the performance of the initial authentication. For initial authentication, the user is prompted to enter the unique registration code 15 and the personal identification number 16 using the hybrid terminal 10. The unique

Registration code 15 and personal identification number 16 are transmitted via the

Internet interface of the hybrid terminal 10 to a Authentifizierangerver the Authentifizierangsvorrichtung 13 transmitted. The authentication server verifies the unique registration code 15, in conjunction with the personal identification number 16, as to whether the unique registration code 15 and the personal registration number

Identification number 16 can be assigned to one of the users. This happens through

Matching the unique registration code 15 and the personal identification number 16 with the user identification data 14 stored on the storage medium of the authentication device 13. If the reconciliation shows that the unique registration code 15 and the personal identification number 16 can be assigned to one of the users, it is determined that this user is entitled to receive the user data from the service provider 17, 18 and / or to send the user data to the service provider 17, 18 is. Subsequently, the user-assigned profile file 19 of the authentication server of the authentication device 13 via the

Internet interface to the Hybridend device 10 transmitted and stored on the hybrid terminal 10.

According to a further preferred embodiment of the invention, corresponding to the schematically illustrated performance of an authentication in FIG. 3, if a user wishes to access a service provider 17, 18, the profile file 19 stored on the hybrid terminal 10 is sent to the authentication server of the authentication device 13 transmitted via the Internet interface of the hybrid terminal 10. The profile file 19 is matched in the authentication server of the authentication device 13 by matching the profile file 19 with the user identification data 14. The user identification data 14 are stored on the storage medium of the authentication device 13. If the comparison or the check shows that the profile file 19 can be assigned to one of the users, this user is recognized as the authorized user and it is determined that this user is to receive the user data from the service provider 17, 18 and / or to send the user data is entitled to the service provider. In other words, the user is due to the _.

Presence of the profile file 19 on the hybrid terminal 10 uniquely identified and recognized as an authorized user or authorized user. Thus, the user is uniquely identifiable after a single access to a service provider 17, 18 including successful authentication of the presence of the profile file 19. This offers the advantage that the user for all the service providers 17, 18 for whom the profile file the

User as an authorized user, authenticated. If the user accesses another service provider 17, 18 in order to receive or send payload data therefrom, the check as to whether the user is authorized for this access to the service provider 17, 18 is made by the presence of the profile file 19 on the hybrid terminal 10. In other words, the one-time authentication suffices by inputting the unique registration code 15 and the personal one

Identification number 16 in order to authenticate as a legitimate user in a plurality of service providers 17, 18 without having to reenter the unique registration code 15 and the personal identification number 16 each time access to another service provider 17, 18 occurs.

According to a further preferred embodiment of the invention in addition to the transmission of the profile file 19 in addition to the input and the subsequent transmission of the personal identification number 16. Should payload of one of the service providers 17, 18 received or sent to this, the particular care with respect to the identification and Requiring authentication of the user, for example when accessing further paid content or the online conclusion of purchase contracts, the user is prompted to enter his personal identification number 16. Both the profile file 19 and the personal identification number 16 are sent via the Internet interface of the hybrid terminal 10 to the

Authentication server of the authentication device 13 transferred. If the verification of the personal identification number 16 and the profile file 19 indicates that it is assignable to one of the users, the determination is made that this user is authorized to receive the user data from the service provider 17, 18 and / or to send the user data to the service provider. The authorization of the user is checked by matching the personal identification number 16 and the profile file 19 with the corresponding user identification data 14 stored on the storage medium of the authentication device. Preferably, the personal identification number 16 is user-selectable and usually includes four numeric characters. In this way, the authorship is particularly convenient for the user since only four numeric characters are to be entered. Alternatively, the personal identification number has more than four characters and also includes any non-numeric characters.

Another embodiment is characterized in that the inputting of the unique registration code 15 and the personal identification number 16 takes place by means of a remote control 21 of the hybrid device. The user can in this way very comfortable with the anyway for the operation of the hybrid terminal 10 erf orderlichen

Remote 21 enter the unique registration code 15 and the personal identification number 16.

According to a further preferred embodiment, the user data comprise at least substantially video data and / or audio data. Typically, the payload includes digital television data. The payload is not limited to television data, but includes any form of audio and video data. Furthermore, the payload data includes control data which is usually transmitted for the correct transmission of the audio and video data.

For linking the audio and video data, i. the content transmitted by the service providers 17, 18, the payload further comprises embedded Internet addresses. This is a synchronization between the user data, such as a running television program, and ordinary HTML websites instead. The payload therefore includes trigger information as well as internet addresses used by the

Hybrid terminal 10 are evaluated. This allows the user to access corresponding content on the Internet, which are assigned to the user data in terms of time and content. In this way, the service providers can offer interactive applications and information that the user can interactively access. According to an alternative embodiment, the payload data includes communication and release data required to handle online transactions between the user and the service provider 17, 18 via the broadband interface. - -

Fig. 4 shows a schematic diagram of the device according to the invention. The device comprises the hybrid terminal 10 with at least one Internet interface and at least one broadband interface, the authentication device 13, wherein the authentication device 13 comprises the registration server, the application server, the authentication server and at least one storage medium. Alternatively, the

Registry, application server and the authentication server implemented on a server. The hybrid terminal 10 is connected via the intra-interface with the

Authentification device 13 connected and connected via the broadband interface with at least one service provider 17, 18. The authentication device 13 is connected to at least one of the service providers 17, 18 via the second Internet connection and configured such that, for example, the release message can be transmitted from the authentication device 13 to the service provider 17, 18.

Furthermore, the internet-enabled terminal 11 is connected to the registration server of the authentication device 13 via the first Internet connection 12. In this case, either the registration server of the authentication device 13 is adapted to at least generate the unique registration code 15 and a professional file 19 associated therewith upon receipt of a request message sent by the hybrid terminal 10 and transmit the unique registration code 15 from the registration server of the authentication device 13 to the hybrid terminal 10 , or that

Hybrid terminal 10 is adapted to generate at least the one unique registration code 15 and the profile file 19 associated with the registration code 15. In other words, either the registration server or the hybrid device 10 is adapted to generate the unique registration code 15, as previously described in connection with the inventive method. For storing the profile file 19 on the hybrid terminal 10, the latter is adapted to deposit the profile file 19 on the hybrid terminal 10 and to output the unique registration code 15 in order to display the unique registration code 15 to the user. The registration server is also customized. User Identifkationsdaten and the unique registration code 15, the Internet-enabled terminal 1 1 to the

Registration server over the first Internet connection 12 are transmitted by comparing user identification data 14 with a predetermined

User reference record and in the event that the user identification - Data 14 correspond to the given user reference data set to store the user identification data 14 of the user on the storage medium and assign the profile file 19 to the user. Further, the registration server is adapted to generate the personal identification number 16, wherein the personal identification number 16 is associated with the user to transmit the personal identification number 16 from the registration server via a separate connection to the user or to the internet-capable terminal 11.

The registration server is further configured and adapted to check if the

Profile file 19 on the hybrid terminal 10 is present. wherein the hybrid terminal 10 is arranged to communicate with the application server of the authentication device 13 via the Internet interface and, in the event that the professional file 19 associated with the user is present on the hybrid terminal 10, perform the authentication to determine if the user is authorized to receive payload data from the service provider 17, 18. otherwise the initial authentication

to determine whether the user is authorized to receive the payload data from the service provider 17, 18 and / or to send the payload data to the service provider 17. 18. to generate the profile file 19, wherein the profi ldatei 19 is assigned to the user, the profile file 19 of the authentication server of

Authentication device 13 via the Internet interface to the hybrid terminal 10 to transfer, the profile file 19 is stored on the hybrid terminal 10, and after Erstauthenti fication or authentication, if the user was authenticated as an authorized user, a release message to at least one of the service providers 17, 18 and to transmit the payload data from the service provider 17, 18, to which the transmission of the release message has been made, the hybrid terminal 10 is adapted to transmit the payload over the

Broadband interface to communicate with the service provider.

Claims

claims

A method of authenticating users of a hybrid terminal (10), wherein the hybrid terminal (10) communicates via at least one Internet interface and communicates with at least one service provider (17, 18) via at least one broadband interface

Generating at least one unique registration code (15),

Generating a profile file (19) and assigning the profile file (19) to the unique registration code (15),

Depositing the profile file (19) on the hybrid terminal (10),

Outputting the unique registration code (15) via the hybrid terminal (10) to display the unique registration code (15) to the user, and including at least a first registration step,

Inputting user identification data (14) of at least one of the users by means of an internet-capable terminal (11),

Prompting the user to enter a personal

Identification number (16) by means of the internet-enabled terminal (11), wherein the personal identification number (16) is freely selectable by the user, and if the user entered the personal identification number (16), transmitting the personal identification number (16) of the Internet-enabled terminal (11) to a registration server

Authentication device (13) via a first Internet connection (12), Transmitting the user identification data (14) of the user from the Internet-end device (11) to the registration server of

Authentication device (13) via the first Internet connection (12),

Requesting the user to input the unique registration code (15) by means of the internet-enabled terminal (11) and transmitting the inputted unique registration code (15) from the internet-enabled terminal (11) to the registration server of the authentication device (13);

Validating the user identification data (14) present on the registration server by comparing the user identification data (14) with a predetermined user reference record and in the event that the

User identification data correspond to the given user reference record.

Associating the sample file (19) with the user.

Storing the user identification data (14) of the user on a

Storage medium of the authentication device (13),

and if the user did not input the personal identification number (16), generating at least the personal one

Identification number (16), wherein the personal identification number (16) is assigned to the user, and

Submitting the personal identification number (16) of the

Regi stri tion server via a separate connection to the user or to the Internet-capable terminal (11), and an authentication step comprising. Checking whether the profile file (19) is present on the hybrid device (10), the hybrid terminal (10) being connected via the Internet interface to a

Application server of Authenti fication device (13) communicates and in the event that on the hybrid terminal (10) the profi ldatei (19) is present,

Performing authentication to determine if the user is authorized to receive payload data from the service provider (17, 18) and / or to send payload data to the service provider (17, 18), otherwise

Performing an initial authentication to determine if the user is authorized to receive the payload data from the service provider (17, 18) and / or to send the payload data to the service provider (17, 18) and if the initial authentication indicates that the user is authorized is.

Generating the profile file (19), wherein the professional file (19) is assigned to the user.

Transfer the profile file (19) from the authentication server of

Authentication device (13) via the Internet interface on the

Hybrid terminal (10), wherein the professional file (19) is stored on the hybrid terminal (10), and after performing the initial authentication or performing the

Authentication, if the user has been authenticated as an authorized user,

Transmitting a release message to at least one of the service providers (17, 18) and Transmitting the payload data from the service provider (17, 18) to which the

Transmission of the release message is carried out, wherein the hybrid terminal (10) for transmitting the payload data via the Brcitbandschnittstelle with the service provider

(17, 18) communicates.

A method according to claim 1, characterized in that generating the unique registration code (15) comprises the steps of:

Sending a request message from the hybrid terminal (10) to the registration server of the authentication device (13) for requesting the unique registration code (15);

Generating the requested unique registration code (15) by means of the registration server of the authentication device (13) and

Transmitting the unique registration code (15) from the registration server of the authentication device (13) to the hybrid terminal (10).

A method according to claim 1, characterized in that generating the unique registration code (15) comprises the step of:

Generating the unique registration code (15) by means of the hybrid terminal (10).

Method according to one of claims 1 to 3, characterized in that the passage of the initial authentication comprises:

Entering the unique registration code (15) and personal

Identification number (16) by means of the hybrid terminal (10), Submitting the unique registration code (15) and personal

Identification number (16) to an authentication server of

Authentication device (13) via the Internet interface of

Hybrid terminal (10),

Checking the unique registration code (15) and personal

Identification number (16) in the authentication server of

Authentication device (13) by matching the unique

Registration codes (15) and the personal identification number (16) with the user identification data (14) of the users stored on the storage medium of the authentication device (13), and if the checking reveals that the unique registration code (15) and the personal registration number

Identification number (16) can be assigned to one of the users,

Determine that this user is to receive the payload from the

Service provider (17, 18) and / or for sending the user data to the service provider (17, 18) is entitled.

Method according to one of claims 1 to 4, characterized in that performing the authentication comprises:

Transmitting the profile file (19) stored on the hybrid terminal (10) to the authentication server of the authentication device (13) via the internet interface of the hybrid terminal (10),

Check the profile file (19) in the authentication server of

Authentication device (13) by matching the profile file (19) with the user identification data (14) of the users stored on the storage medium of the authentication device (13) and if said checking reveals that the profile file (19) is attributable to one of the users is Determine that this user is to receive the payload from the

Method according to one of claims 1 to 5, characterized in that the passage of the authentication comprises:

Entering the personal identification number (16) by means of

Hybrid terminal (10),

Transferring the profile file (19), which is stored on the hybrid terminal (10), and the personal identification number (19) to the authentication server of the authentication device (13) via the Internet interface of the

Hybrid terminal (10),

Checking the personal identification number (16) and the profile file (19) in the authentication server of the authentication device (13) by matching the personal identification number (16) and the profile file (19) with the user identification data (14) of the users stored on the storage medium of the authentication device (13) are stored, and if the checking reveals that the personal identification number (16) and the profile file (19) are attributable to one of the users,

Determine that this user is to receive the payload from the

Method according to one of claims 1 to 6, characterized in that the I hybrid terminal (10) via the Internet interface and via the

Broadband interface according to the HbbTV standard communicates by the hybrid terminal (10) is designed as HbbTV terminal. Method according to one of claims 1 to 7, characterized in that the communication between the internet-enabled terminal (11) and the

Authentication device (13) via a secure Internet network connection by means of a secure hypertext transmission protocol.

Method according to one of Claims 1 to 8, characterized in that the unique registration code (15) comprises exclusively numeric characters.

10. The method according to any one of claims 2 to 9, characterized in that the input of the unique registration code (15) and the personal

Identification number (16) by means of a remote control (21) of the

Hybrid terminal (10) takes place.

Method according to one of claims 1 to 10, characterized in that the user data comprise at least substantially video data and / or audio data.

Method according to one of claims 1 to 1 1, characterized in that the user data include communication and release data.

Device for authenticating users of a hybrid terminal (10), comprising at least one hybrid terminal (10) having at least one Internet interface and at least one broadband interface, an authentication device (13), wherein the authentication device (13) comprises a registration server, an application server, a

Includes authentication server and at least one storage medium, and wherein the hybrid terminal (10) via the Internet interface with the

Authentication device (13) is connected and via the

Broadband interface with at least one service provider (17, 18) is connected, and wherein the authentication device (13) via a second

Internet connection (20) with at least one of the service providers (17, 18)

an internet-enabled terminal (11) that is connected via a first Internet connection (12) to the registration server of the authentication device (13), wherein either the registration server of the authentication device (13) is adapted, at least one unique registration code (15) and a the

Registration code (15) associated with receiving a request message sent from the hybrid terminal (10) and generate the unique registration code (15) from the registration server of

Authentication device (13) to the hybrid terminal (10) to transmit or the hybrid terminal (10) is adapted to generate at least one unique registration code (15) and the registration code (15) associated profile file (19), and wherein the hybrid terminal (10 ) is adapted to place the profile file (19) on the hybrid terminal (10) and output the unique registration code (15) to indicate the unique registration code (15) to the user, and wherein the registration server is further adapted to User identification data (14) and the unique registration code (15) transmitted from the Internet-enabled terminal (11) to the registration server via the first Internet connection (12), by comparing the

User identification data (14) with a predetermined

User reference record to validate and in the event that the

User identification data (14) corresponding to the given user reference record, associating the profile file (19) with the user, storing the user identification data (14) of the user on the storage medium, generating at least one personal identification number (16), the personal identification number (16) being the user assigned.

the personal identification number (16) from the registration server via a separate connection to the user or to the Internet-capable terminal (11) and to check whether the profile file (19) on the hybrid terminal (10) is present, said hybrid terminal ( 10), via the Internet interface with an application server of the authentication device (13)

and in the event that the profile file (19) is present on the hybrid terminal (10), perform an authentication to determine if the user is authorized to receive payload data from the service provider (17, 18), otherwise (b) perform an initial authentication to determine whether the user is authorized to receive the payload data (19, 18) and / or send the payload data to the service provider (17, 18) to generate the profile file (19) wherein the profile file (19) is associated with the user, the profile file (19) from the authentication server of

Authentification device (13) via the Internet interface to the hybrid terminal (10) to transmit, wherein the profile file (19) on the

Hybrid terminal (10) is stored. and after the initial authentication or the authentication, if the user has been authenticated as an authorized user, to transmit a release message to at least one of the service providers (17, 18) and transmit the payload data from the service provider (17, 18) to which the transmission the release message has been made, wherein the hybrid terminal (10) is adapted. to communicate with the service provider for transmission of the payload data over the broadband interface.