KR20020035575A - Impulse pay per use method and system for data and multimedia services - Google Patents

Abstract

The present invention provides a method and system for impulsively purchasing a service over a communication network, such as a cable or satellite television network. Such services include games or information along with television programming, home-shopping, email services, streaming media, and the like. Security is provided through a credential generated by the connection controller 14 and a credential token generated by the security processor. The secure processor is located in the subscriber terminal 16 where the subscriber orders and obtains the service. If pre-authenticated, the token is generated when the subscriber selects the service or when the service is impulsively purchased. The token is securely signed and used by policy / proxy server 18 to limit the scope for NO ISPs and related services to more easily provide these services to subscribers.

Description

Impulse pay-per-use methods and systems for data and multimedia services {{IMPULSE PAY PER USE METHOD AND SYSTEM FOR DATA AND MULTIMEDIA SERVICES}

Cable and satellite television networks are known in which video services are available for charge. In addition, the Internet, America On-Line, with websites with different types of applications, ranging from general information about entertainment that can all be accessed at fixed monthly fees to electronic shopping. Computer network services, such as Compuserve and the like, are also known. In the past, cable and satellite television networks provided individual television services on the impulse buying principle. Such "impulse pay-per-view" (IPPV) services include television movies or certain sporting events that can be ordered by viewers upon payment of a fee.

The provision of pay-per-view services is desirable from the customer's point of view because the customer only needs to pay for those services that are required and provided at the time the customer can enjoy the service. Whether they are movies or sporting events, the success of pay-per-view services has prompted system operators and programmers to consider additional types of services offered using a pay-per-view approach.

One derivative of the pay-per-view approach is the ability to provide services based on data and multimedia applications. Such services include, without limitation, games or information along with television programming, home shopping, email services, and the like. To provide such a service, acceptable security measures must be implemented. In the field of subscribing television, such as satellite and cable television, security is provided using conditional access (CA) technology.

It is advantageous to extend television IPPV conditional access to services based on new applications. In particular, it provides the advantage of extending such conditional connections without requiring a new infrastructure to support these features by providing a simple extension to already deployed systems. Moreover, subscriber terminals, such as set-top boxes already used exclusively for video IPPV services, may provide an "impulse pay-per-use" (IPPU) service for video-bearing or non-video applications. There is an advantage to being able to provide.

The present invention provides a method and system having the above and other advantages.

The present invention relates to telecommunications networks, such as cable television, satellite television and computer networks, where services are available for a fee, and in particular to methods and systems for enabling data and multimedia services to be purchased over such networks. It is about.

1 is a block diagram of a system according to the invention,

2 is a block diagram of relevant components of a subscriber station in accordance with the present invention.

The present invention provides a method and system for ensuring secure impulse pay-per-use (IPPU) service through a communication network.

In a simple embodiment, the subscriber IPPU selection is sent by the subscriber to the access controller (via the telephone in the case of call-priority entitlement or through the subscriber terminal in the case of pre-authenticated entitlement). The connection controller generates an encrypted message with the service identifier and associated authentication settings related to the subscriber IPPU selection, which is then sent from the connection controller to the subscriber terminal, along with the cost of the IPPU service selected by the subscriber. . The subscriber station checks whether the cost of IPPU selection is within the subscriber's credit qualification. If such verification is successful, the subscriber terminal generates a security entitlement token used by the client application residing at the subscriber terminal. The qualification token is selectively generated by the access controller and transmitted to the subscriber station. The client application then sends the credential token to the server (eg, proxy / policy server) in a secure manner to determine the status of the subscriber's credential to receive the IPPU selection. If the subscriber's eligibility is verified to receive the IPPU selection, the server further processes the IPPU selection to make the selected service / application more available to the viewer.

The server is an ISP that is joined to an independent Internet Service Provider (ISP) proxy / policy server, Multiple System Cable Operators (MSO), or another Network Operators (NO) proxy / policy / policy server. Proxy / policy server, NO proxy / policy / policy server, and the like.

In another embodiment, the IPPU selection is sent first to a Customer Response Center (CRC) / billing system that in turn sends the IPPU selection to the access controller. The billing system bills to subscribers of the IPPU selection.

In the case of a "Cyber CRC" configuration in which communication is provided via a global communication network (e.g., the Internet) or the like, subscriber IPPU selection may be sent to the CRC / billing system via a web browser operating at the subscriber terminal and a web browser of the billing system. have.

In accordance with some communication with the connection controller, the billing system may operate the connection controller to add a service associated with subscriber IPPU selection, which is a separate process informing the connection controller the subscriber is entitled to access the service.

In addition to those known in the industry, the term “billing system” as used herein is broader than just a billing computer. In general, billing systems are associated with business systems that drive network operator operations and include functionality such as billing, system configuration, and business operations.

In another embodiment, the security credential token is a signed and encrypted credential token, which is securely sent from the client application to the server for authentication and decryption. The entitlement token is encrypted using, for example, the subscriber's private key. At that time, the proxy / policy server may use the subscriber's public key to decrypt the entitlement token. The token is also encrypted using a symmetric key encryption method. For example, the token is encrypted using a Date Encryption Standard (DES) technology and with a DES key encrypted using a public key associated with a server (DES described in US Pat. No. 3,962,593). Is sent. The server then uses the private key to decrypt the DES key and uses the decrypted DES key to decrypt the token. The entitlement token may be generated at the access controller or the subscriber station.

In yet another embodiment, the service identifier is associated with one or more service-related codes and data subjects that are periodically sent from the access controller to the subscriber terminal.

The connection controller may be a local connection controller or a national connection controller.

The IPPU service consists of accessing a given site, streaming media from the site, downloading a multimedia application from the site, accessing content residing on the site, shopping, email, video mail, and the like.

The subscriber terminal may be a cable television set top box, a digital television or host having a feature of deployment capability, a personal computer, or the like.

In another embodiment, subscriber IPPU selection is pre-authenticated at the subscriber terminal for a predetermined credit amount. Pre-authentication of the IPPU allows a subscriber to request authentication locally (eg, at a subscriber terminal). The subscriber station may subtract the cost associated with the subscriber IPPU selection from the amount of credit.

To prevent the denial of the IPPU selection, the subscriber station can safely report the subscriber IPPU selection back to the access controller.

Corresponding methods and systems are provided.

The impulse pay-per-view concept associated with television services according to the present invention extends to impulse pay-per-use (IPPU) services related to additional data and multimedia applications and the like. The term "use" relates to the operation of using either a subscriber terminal resource or a code / data object. Such subjects may consist of software code and / or data and may reside or be downloaded to the subscriber terminal.

The present invention entitles the subscriber to purchase the service impulsively and safely. Such a service may or may not interact in real time with the network to deliver the service. In particular, the secure microprocessor of the subscriber terminal is provided with hardware and / or software such that the secure processor can safely generate signed credentials tokens, and before being further processed by the server associated with the given service, the ISP or NO proxy / policy server. Used by. The token is generated when the subscriber selects a service (if it is pre-authenticated) or impulsively purchases such a service. Such an IPPU purchase will utilize components residing at the subscriber terminal as well as applicable network components that support the IPPU purchase processing.

Various system elements are used to provide IPPU services in accordance with the present invention. These include:

1. Customer Response Center (CRC): This is where you create your order (Cyber Customer Service).

Indicators (via Cyber Customer Service Representative (CSR) or other means)

The order call is processed (usually used for call precedence service).

2. Existing network operator billing system (NO-BS): Existing NO billing system

Controller (access controller (AC)) or local controller (digital

Interface with a Digital Access Controller (DAC). barrel

In addition, the connection request and authentication rights (qualification) are transferred from the billing system.

3. Internet Service Provider Billing System (ISP-BS): This is a NO that handles ISP services.

Existing bills from partner Internet Service Providers (ISPs)

Ring system (optional).

4. AC / DAC: access to control authentication and purchase services collected according to subscriber principles

Controller.

5. Subscriber terminal: Video, audio and based on subscription, call-priority, or impulse pay.

Cable television set-top box that provides data service, characterized by deployment performance

Digital television or a device such as a host, personal computer, or the like.

1 and 2, the present invention is effectively described for various processing flows between related components. However, before referring to the drawings, several applicable scenarios in which the present invention may be used are described. These include:

1. Call-Advance Qualification / Certification

1.1 Carouseled Applications (Services)

1.2 Server-based Applications (Services)

1.3 Streaming Media Services

2. Impulse Buyer / Certification

2.1 Carouselized Application (Service)

2.2 Server-based Applications (Services)

2.3 Streaming Media Services

All of the carouselized application scenarios described above can be achieved in a manner similar to IPPV and call-priority of video services. In particular, subscription and impulse tiers within a conditional access system are associated with service identifiers that themselves are associated with one or more service-related codes and data objects. These objects are carouseled (i.e. transmitted periodically) to either an output band channel or a given input band channel corresponding to the provided service. The authentication tire is delivered in an encrypted message to the secure processor of the subscriber terminal.

If a customer wants to purchase a service marked as IPPU, he usually owns a certified tire that allows him to purchase an IPPU, and the network authorizes him to have appropriate credit, the customer can directly contact the subscriber terminal regardless of the network. You can order a purchase. The subscriber station will later report this purchase back to the network in a secure manner if requested or voluntary.

Meanwhile, server-based application scenarios are further included. This is because certain actions are required by the server (or proxy server) in order for the viewer to easily use the selected service / application. Such servers include, for example, accessing certain sites, downloading programs from these sites, or connecting to content residing at these sites (eg, streaming media content). The policy / proxy server needs a security mechanism to determine whether the subscriber is duly entitled to the selected service. The mechanism must be secured to protect the work activities where the purchase is not registered but the qualification token (encrypted, signed or otherwise) indicates whether the subscriber is eligible for investigation after service.

The impulse-purchasable service set (eg, multimedia application, home-shopping, email, etc.) is associated with a corresponding service-identifier (service_id) recognized by both NO and ISP billing systems. Call precedent service tires and / or IPPU tires are associated with each service for each subscriber. Each service_id has a non zero cost associated with it.

In one embodiment, as shown in FIG. 1, subscriber IPPU selection is sent by the subscriber to connection controller 14 (eg, over the phone in the case of call-priority entitlement or in the case of pre-authenticated entitlement). Through the subscriber terminal). The connection controller 14 generates an encrypted message with the service identifier and associated authentication settings (e.g., authentication tire settings) associated with the subscriber IPPU selection, which is then sent from the connection controller 14 to the subscriber terminal 16. Is sent). The same message (or separate message) contains the cost of the corresponding IPPU selection.

The subscriber station 16 checks whether the cost of IPPU selection is within the subscriber's credit qualification. If such verification is successful, subscriber terminal 16 generates a security entitlement token used by the client application residing at subscriber terminal 16 (eg, by a secure processor located at the subscriber terminal). In addition, the qualification token is generated by the access controller 14 and transmitted to the subscriber terminal 16. The client application then sends the entitlement token to the server 18 in a secure manner to determine the status of the entitlement of the subscriber to receive the IPPU selection. If the subscriber's eligibility is verified to receive the IPPU selection, the server 18 further processes the IPPU selection to facilitate the use of the service / application by the viewer.

The server 18 may be an independent Internet Service Provider (ISP) proxy / policy server, an ISP proxy / policy server subscribed to a network operator (NO) proxy / policy / policy server, a NO proxy / policy / policy server, and the like.

In another embodiment, the IPPU selection is sent first to a customer response center (CRC) / billing system 12 that in turn sends the IPPU selection to connection controller 14. Billing system 12 bills the subscriber of the IPPU selection. The CRC may be part of the NO billing system as shown in FIG. 1, or the CRC may be each separate entity. The CRC informs the billing system of call-ahead (or cyber) subscriber selection and sends the information to the NO billing system (NO-BS).

In the case of a "Cyber CRC" configuration in which communication is provided via a global communication network (e.g., the Internet) or the like, subscriber IPPU selection is performed via a web browser operating at subscriber terminal 16 and a web browser of billing system 12 via a CRC / May be sent to billing system 12.

The server also informs the ISP's billing system 20 (ISP-BS) about the purchase process. In a NO system where there is one NO billing system for all services, ISP billing system 20 is in fact the same or part of NO billing system 12.

In accordance with the billing model, the subscriber station 16 subtracts the subscription cost associated with the IPPU (purchase once until terminated), and the ISP-BS 20 charges an additional processing fee. In addition, subscriber terminal 16 registers only purchases and delivers entitlements (as described above) without charge. Next, ISP billing system 20 charges.

In accordance with some communication with the connection controller 14, the billing system 12 connects the connection controller to add the service associated with the subscriber IPPU selection, which is a separate process informing the connection controller 14 the subscriber is entitled to access the service. (14) can be operated.

In addition to those known in the industry, the term “billing system” as used herein is broader than just a billing computer. In general, billing systems are associated with business systems that drive NO operations and include functionality such as billing, system configuration, and business operations.

In another embodiment, the security credential token is a signed and encrypted credential token, which is securely transmitted from the client application to the server 18 for authentication and decryption.

The entitlement token is encrypted using, for example, a public key / private key method and / or a DES encryption method. The subscriber station 16 delivers the encrypted credential token to the server 18 for determination of the credential. The qualification token is generated at the connection controller 14 or the subscriber station 16.

In yet another embodiment, the service identifier is associated with one or more service-related codes and data objects that are periodically sent from the access controller 14 to the subscriber terminal 16.

The connection controller 14 may be a local connection controller or a national connection controller.

The IPPU service consists of accessing a given site, streaming media from the site, downloading a multimedia application from the site, accessing content residing on the site, shopping, email, video mail, and the like.

The subscriber station 16 may be a cable television set top box, a digital television or host having a feature of deployment performance, a personal computer, or the like.

In another embodiment, subscriber IPPU selection is pre-authenticated at subscriber terminal 16 for a predetermined amount of credit. Pre-authentication of the IPPU allows the subscriber to request authentication locally (eg, at subscriber terminal 16). The subscriber station 16 may subtract the costs associated with subscriber IPPU selection from the amount of credit.

In order to prevent the denial of the IPPU selection, the subscriber terminal 16 can safely report the subscriber IPPU selection back to the connection controller 14.

2 provides an example of the processing that occurs at subscriber terminal 16 in a particular embodiment. Subscriber terminal 16 receives an encrypted message from connection controller 14 as described in connection with FIG. As mentioned above, the encrypted message or each separate message includes the cost of the corresponding IPPU selection. The secure processor 32 located at the subscriber terminal 16 then processes the encrypted message to ascertain whether the cost of IPPU selection is within the subscriber's credit credentials. If such verification is successful, subscriber terminal 16 generates a security credential token used by client application 40 (eg, by the same secure processor 32). The client application 40 is provided with this token by an application layer interface routine that sends the credential token to the server 18 in a secure manner as described in connection with FIG. In this way, server 18 may further verify the validity of the subscriber's entitlement to the requested service. In addition, NO provides control and absolute visibility of the services available for purchase, providing non-repudiation of purchase processing within the subscriber terminal.

Once the qualification for the particular IPPU selection is confirmed, the IPPU selection content is sent by the server 18 to the subscriber terminal 16 as described in connection with FIG. The IPPU selection is received by the security processor 32 via existing receiving circuitry (ie, the receiver output of FIG. 2). The secure processor will further process the IPPU content (eg, if the content associated with the selection is encrypted). The unencrypted content can then be processed in a conventional manner for display (eg, by demultiplexer / decoder 34 or software on subscriber terminal 16).

Device memory 30 is provided for storing local data associated with subscriber terminal 16 and / or purchases made therewith. In addition, this memory may be used to store software and / or firmware associated with subscriber terminal 16, as well as data processed by CPU 36, depending on the particular implementation selected.

Accordingly, the present invention provides an improved method and system for enabling secure impulse pay-per-use (IPPU) services to be obtained over a communications network. In particular, the subscriber terminal may use a signed and / or encrypted token used by the NO or subscribed ISP proxy server to further validate the subscriber's eligibility for the requested service or set of services provided by the NO or subscribed ISP. Is provided (eg, by a secure processor located at a subscriber terminal). In addition, the present invention requires the subscriber to pay for all IPPU services ordered, by providing non-rejection of purchase processing through the subscriber terminal. The intended result is to provide NO with control and absolute visibility of available services.

Although the present invention has been described in connection with various specific embodiments, it will be understood that various changes and modifications can be made therein without departing from the object and background of the present invention.

Claims (32)

A method of providing a secure impulse pay-per-use (IPPU) service to a subscriber via a communication network, Sending a subscriber IPPU selection from the subscriber to an access controller; Generating an encrypted message at the connection controller with an associated authentication setting and service identifier associated with the subscriber IPPU selection, Forwarding the encrypted message from the access controller to the subscriber terminal with the cost of the IPPU service selected by the subscriber, Verifying that the cost is within the subscriber's credit credentials, and if such verification is successful, generating a security credential token used by the client application residing at the subscriber terminal; Securely transmitting the entitlement token from the client application to a server to determine a status of the entitlement of the subscriber; Processing the IPPU selection at the server to enable the selection to be used by the subscriber in accordance with the processing of the selection and associated entitlement. The server of claim 1, wherein the server is one of an independent Internet service provider (ISP) proxy / policy server, an ISP proxy / policy server subscribed to a network operator (NO) proxy / policy / policy server, or a NO proxy / policy / policy server. Any one of them. The method of claim 1, wherein transmitting the subscriber IPPU selection to the access controller comprises: transmitting the subscriber IPPU selection to a billing system; Forwarding the IPPU selection from the billing system to the connection controller; Billing to a subscriber of said provided IPPU service. 4. The method of claim 3, wherein the IPPU selection is transmitted to the billing system using a web browser associated with the subscriber terminal and a web server associated with the billing system. 4. The system of claim 3, wherein in accordance with some communication with the connection controller, the billing system operates the connection controller to add a service related to the subscriber IPPU selection, And the service adding step is a separate process of informing the access controller that a subscriber is entitled to access the service. 2. The method of claim 1, wherein the security credential token is a signed and encrypted credential token, wherein the signed and encrypted credential token is securely transmitted from the client application to a server for authentication and decryption. 7. The method of claim 6, wherein the credential token is encrypted using at least one of (i) a private key / public key encryption method and (ii) a symmetric key encryption method. 2. The method of claim 1, wherein the service identifier is associated with one or more service-related codes and data subjects that are periodically transmitted from the access controller to the subscriber terminal. The method of claim 1, wherein the connection controller is a local connection controller. 2. The method of claim 1, wherein the connection controller is a national connection controller. The method of claim 1, wherein the service comprises at least one of accessing a site, streaming media from a site, downloading a multimedia application from a site, accessing a content residing on the site, shopping, e-mail, and video mail. . The method of claim 1, wherein the subscriber station is any one of a cable television set-top box, a digital television having a feature of deployment performance, a host, or a personal computer. 2. The method of claim 1, wherein the subscriber IPPU selection is pre-authenticated at the subscriber terminal for a predetermined amount of credit. 14. The method of claim 13, wherein the costs associated with selecting said subscriber IPPU are subtracted from said credit amount. 2. The method of claim 1, further comprising securely reporting the subscriber IPPU selection from the subscriber station to the access controller. The method of claim 1, wherein the credential token is generated at either the access controller or the subscriber station. A system for providing a secure impulse pay-per-use (IPPU) service to a subscriber via a communication network, Subscriber terminals with client applications, A connection controller for receiving a subscriber IPPU selection; It is configured with a server, The subscriber forwards the subscriber IPPU selection to the access controller, The connection controller generates an encrypted message with an associated authentication setting and service identifier associated with the subscriber IPPU selection, The connection controller forwards the encrypted message to the subscriber terminal together with the cost of the IPPU service selected by the subscriber, The subscriber station verifies that the cost is within the subscriber's credit qualification, and if such verification is successful, the subscriber terminal generates a security credential token used by the client application residing at the subscriber terminal, The client application securely sends the entitlement token to a server to determine the status of the entitlement of the subscriber, The server processes the IPPU selection such that the selection can be used by a subscriber in accordance with the processing of the selection and associated entitlements. 18. The server of claim 17, wherein the server is one of an independent Internet service provider (ISP) proxy / policy server, an ISP proxy / policy server subscribed to a network operator (NO) proxy / policy / policy server, or a NO proxy / policy / policy server. The system, characterized in that any one. 18. The system of claim 17, further comprising a billing system, The subscriber sends the subscriber IPPU selection to the billing system, The billing system delivers the subscriber IPPU selection to the access controller, The subscriber is billed for the provided IPPU service. 20. The web browser of claim 19, further comprising: a web browser associated with the subscriber station for delivering the IPPU selection to the billing system; And a web server associated with the billing system for receiving the subscriber IPPU selection from the web browser. 20. The system of claim 19, wherein upon billing a portion of the subscriber IPPU selection to the connection controller, the billing system operates the connection controller to add a service associated with the subscriber IPPU selection, The service addition step is a separate process that informs the access controller that a subscriber is entitled to access the service. 18. The system of claim 17, wherein the security credential token is a signed and encrypted credential token, wherein the signed and encrypted credential token is securely transmitted from the client application to a server for authentication and decryption. 23. The system of claim 22, wherein the credential token is encrypted using at least one of (i) a private key / public key encryption method and (ii) a symmetric key encryption method. 18. The system of claim 17, wherein the service identifier is associated with one or more service-related codes and data subjects that are periodically transmitted from the access controller to the subscriber terminal. 18. The system of claim 17, wherein the connection controller is a local connection controller. 18. The system of claim 17, wherein said connection controller is a national connection controller. 18. The system of claim 17, wherein the service comprises at least one of accessing a site, streaming media from a site, downloading a multimedia application from a site, accessing a content residing on the site, shopping, email, and video mail. . 18. The system of claim 17, wherein the subscriber station is any one of a cable television set-top box, a digital television or host having a deployment capability, or a personal computer. 18. The system of claim 17, wherein the subscriber IPPU selection is pre-authenticated at the subscriber terminal for a predetermined amount of credit. 30. The system of claim 29, wherein the cost associated with selecting said subscriber IPPU is subtracted from said credit amount. 18. The system of claim 17, wherein the subscriber station securely reports the subscriber IPPU selection back to the access controller. 18. The system of claim 17, wherein the credential token is generated at either the access controller or the subscriber station.