Patent Application
20050132191
1. Field of the Invention
The present invention is generally related to authentication. More particularly, the present invention is related to a method for authenticating different rendering devices with different service providers.
2. Description
Authentication of rendering devices exists today. Authentication mechanisms enable control hosts to identify, control, and access the rendering devices. The authentication mechanisms do not allow for the choosing of content that is allowed to be played on the devices. Thus, what is needed is a method for authenticating different rendering devices with different service providers and/or different servers.
The accompanying drawings, which are incorporated herein and form part of the specification, illustrate embodiments of the present invention and, together with the description, further serve to explain the principles of the invention and to enable a person skilled in the pertinent art(s) to make and use the invention. In the drawings, like reference numbers generally indicate identical, functionally similar, and/or structurally similar elements. The drawing in which an element first appears is indicated by the leftmost digit(s) in the corresponding reference number.
While the present invention is described herein with reference to illustrative embodiments for particular applications, it should be understood that the invention is not limited thereto. Those skilled in the relevant art(s) with access to the teachings provided herein will recognize additional modifications, applications, and embodiments within the scope thereof and additional fields in which embodiments of the present invention would be of significant utility.
Reference in the specification to “one embodiment”, “an embodiment” or “another embodiment” of the present invention means that a particular feature, structure or characteristic described in connection with the embodiment is included in at least one embodiment of the present invention. Thus, the appearances of the phrase “in one embodiment” or “in an embodiment” appearing in various places throughout the specification are not necessarily all referring to the same embodiment.
Embodiments of the present invention are directed to a method for authenticating different rendering devices with different service providers and/or different servers in a home network environment. Authenticating certain devices with certain services provides control over what media one watches and/or listens to in the home. A controlling device, such as, but not limited to, a media center, a personal computer (PC), etc., within the home network acts as an authorization agent for the rendering device and the service provider. The authorization agent enables channels from different service providers to be played on different rendering devices. For example, channels 1 to 5 from service provider A may be played on rendering device 1 while channels 3 to 6 from service provider B may be played on rendering device 2. The authorization agent also enables license management for media content and billing for the license to be done in an effective manner. Thus, if content provider A wants its content to be played only on rendering device B and not on rendering device C, the authorization agent will direct the flow of media content from content provider A to rendering device B only.
Embodiments of the present invention are described as being implemented in an extended wireless PC (personal computer) home environment. An extended wireless PC home environment refers to a home network environment in which a controlling device, such as a PC, is used to extend digital media and information access throughout the home using wireless technology. Although embodiments of the invention may be described using a PC as the controlling device, one skilled in the relevant art(s) would know that other components may be used to extend digital media and information access throughout the home. Such components may include, but are not limited to, a media center, a set top box, a storage PC, or a combination thereof. One skilled in the relevant art(s) would also know that embodiments of the present invention may also be implemented in a home or a business environment that incorporate other types of computing devices to extend digital media and information access throughout the home or business using both wired and wireless technology.
Home network 102 uses a controlling device 114 to extend digital multimedia content and information received from independent content service providers 104, broadcast operations centers 106, and studios 108 throughout the home using wired and/or wireless technology. Controlling device 114 may include, but is not limited to, a personal computer (PC), a media center, a set top box, a storage PC, a workstation, a server, a combination thereof, or any other computing device capable of storing and streaming media content. Controlling device 114 may store content distributed by independent content service providers 104, broadcast operations centers. 106, and studios 108. Controlling device 114 may distribute the content in an appropriate manner to any one or more rendering devices in the home. This will be described in detail below with reference to
Home network 102 includes a plurality of rendering devices, such as, for example, device A, device B, device C, devices D1, D2, and D3, and devices E1, E2, and E3. Devices D1, D2, and D3, and devices E1, E2, and E3 are shown in
In one embodiment, devices A, B, and C are shown to directly connect to controlling device 114 via a network connection. The network connection may be a wired connection, such as, for example, a DV (digital/video) connection, or it may be a wireless connection, such as, but not limited to, Bluetooth.
In one embodiment, controlling device 114 may also receive digital multimedia data from other digital devices, such as, but not limited to, an MP3 player 116, a digital camcorder 118, and a digital camera 120. The digital multimedia data received from these digital devices may be rendered on one or more of rendering devices A, B, C, D1, D2, D3, E1, E2, and E3 via controlling device 114.
In one embodiment, MP3 player 116, digital camcorder 118, and digital camera 120 may act as rendering devices and/or storage devices as well. Multimedia content from independent content service providers 104, broadcast operations centers 106, and studios 108, may be streamed to any one of devices 116, 118, and 120 for storing and/or rendering the media content.
Digital Rights Management schemes enable one to play media content on multimedia devices, such as, for example, a PC, a television, or an audio device. In home network 102, as shown above, there are many rendering devices in which media can be watched and/or listened to from controlling device 114. As previously indicated, embodiments of the present invention provide a method for authenticating different rendering devices with different service providers in a home network environment.
Service provider 104A includes channels A-1, A-2, A-3, . . . , A-n. Service provider 104B includes channels B-1, B-2, B-3, . . . , B-n. The content from service providers A and B are received by controlling device 114. Controlling device 114 controls the flow of the content from the various content providers to the various rendering devices.
Controlling device 114 includes an authentication mechanism, which may be implemented in software, hardware, or a combination thereof. The authentication mechanism is aware of all content services, such as, for example, content services from content service providers 104A and 104B, that are coming into home network 102. The authentication mechanism is also simultaneously aware of rendering devices A, B, C, E1, E2, and E3 in home network 102 as well. In one embodiment, knowledge of rendering devices A, B, C, E1, E2, and E3 may be based on UPnP standards device discovery mechanisms. One skilled in the relevant art(s) would know that other discovery mechanisms may also be used to identify rendering devices A, B, C, E1, E2, and E3.
An administrator 202 of controlling device 114, such as a parent, head of the household, or another adult within the home, may decide which rendering devices, such as rendering devices A, B, C, E1, E2, and E3, can render or play content from which service providers, such as service providers 104A and 104B. For example, if rendering devices E1, E2, and E3 reside in a child's room, administrator 202 may only want the child to watch and/or listen to cartoon networks and children's channels. Administrator 202 of controlling device 114 will then configure such service using the authentication mechanism to authenticate rendering devices E1, E2, and E3 with channels from service providers 104A and 104B that provide cartoon and other children's programming. Administrator 202 does this by enabling controlling device 114 to control the programming of such channels, thereby enabling the child access via rendering devices E1, E2, and E3 to only these channels and inhibiting access to all other channels. As shown in
In one example, service provider 104A provides premium content on channel A3 and has a tie up with home network 102 such that service provider 104A may have special hooks in the hardware to detect rendering device C. Service provider 104A may have received special permissions from different entities to render their premium content on rendering device C in home network 102. In this instance, the authentication mechanism on controlling device 114 will allow the premium content from channel A3 on service provider 104A to be played or rendered on rendering device C. Thus, controlling device 114 authenticates rendering device C to receive the premium content from channel A3 of service provider 104A, and therefore enables the flow of content from channel A3 of service provider 104A to rendering device C only.
In another example, rendering device B has been authenticated to receive all channels from service provider 104B, while rendering device C has only been authenticated to receive channel A1 from service provider 104A. Thus, rendering device B receives content from service provider 104B only and rendering device C receives content from service provider 104A only. Both of these scenarios are also shown in
Standard authentication techniques, such as, for example, using identifiers (IDs), may be used to authenticate the rendering devices to controlling device 114. In one embodiment, UPnP security, which is well known to those skilled in the relevant art(s), may be used to authenticate the rendering devices to controlling device 114. In one embodiment, IDs may also be used to authenticate service providers as well.
In block 304, when a rendering device is connected to a network, such as, but not limited to, a home network, a tuner associated with the rendering device is identified. In one embodiment, the tuner may be a built in tuner that allows an external entity, such as a controlling device (i.e., controlling device 114), to control channel programming of the tuner. Yet, in another embodiment, where the rendering device may be coupled to, for example, a set top box, the set top box may include a tuner that allows the external entity to control channel programming of the tuner. The tuner includes a unique identification, stored in its hardware. In one embodiment, the unique identification may comprise the model number and serial number of the tuner or rendering device (if the tuner is included in the rendering device). In another embodiment, the unique identification may be another unique number, such as, for example, a globally unique identifier (GUID). Globally unique identifiers are well known to those skilled in the relevant art(s).
In block 306, the rendering device is registered with the controlling device via a device management application running on the controlling device. During the registration process, the controlling device stores the rendering device ID and capabilities of the rendering device, which may be obtained using UPnP discovery mechanisms. Upon completion of the registration process, the controlling device authenticates the rendering device and assumes control of programming the rendering device. From this point onward, programming of the rendering device from the rendering device's remote control or the rendering device itself is inhibited.
In block 308, an administrator is enabled to select which services can be used on the rendering device. The decision as to which services can be used on the rendering device may be influenced by many factors. Such factors may include, but are not limited to, parental restrictions as to what may be played on a child's or teenager's rendering device and licensing requirements on content that may be played on the rendering device. For example, the rendering device may be a television located in the child's room. The family may have a subscription to children's movies on demand service and may have a license restriction to watch one movie at a time from this service. The administrator (or parent in this case) may allow unlimited access of such content to flow from the service to the controlling device to the television in the child's room. At the same time, another television within the home network may also be allowed unlimited access of such content as well. The authentication mechanism within the controlling device will allow the movies on demand to be played on the television in the child's room only when a movie is not being played on the other television and vice versa. Thus, the authentication mechanism will further enforce the “one movie at a time” restriction.
In an embodiment, time restrictions on content flow may also be adhered to by the authentication mechanism. For example, a parent may have selected the display of public channels that provide cartoons and other children's content on the television in the child's room for early morning viewing, but may have restricted the viewing of the public channels during other times, such as prime time, when entertainment for adults is being played.
In block 310, once the controlling device has been programmed with the service selections from the administrator, the tuner of the rendering device is programmed via the controlling device with the selections. Once the tuner has been programmed, services that do not depend on the time of day are always enabled, and in the example for the television in the child's room, the child can change to these channels only using the remote control for the television located in the child's room. Depending on the time of day, the controlling device will automatically reprogram the rendering device to allow for time restricted programming to be played at the appropriate times. At that time, the restricted channels may be accessed from the remote control of the rendering device.
As previously indicated, the authentication of service providers with rendering devices is not limited to use within a home network. In fact, the method may be used in other networks, such as, but not limited to, for example, a network on a college campus or a network owned by a company.
In block 324, the student registers their rendering device with a distribution service, such as, but not limited to, a music distribution service or a movie distribution service for which the college has a subscription. The registration of the rendering device occurs while on campus. The registration may be done by connecting the rendering device to a secure PC, or other computing device, set up by the college for this purpose.
In block 326, at the completion of the registration process, the student receives authentication information that can be used to download content from the distribution service and play the content on the student's rendering device.
In the student's dorm room, the student may register the rendering device with PC running device management software (block 328) supplied by the college via a student PC. The student PC stores the device ID and content distribution service authentication information. Using this authentication information, the student PC can download content from the distribution service and save it on the rendering device for future playback. Only the content obtained using this particular authentication information can be played on this particular rendering device.
While the student is at home on winter or summer break, the student may register the rendering device using the PC running device management software on the student's home PC (block 330). The home PC stores the device ID and content distribution service authentication information. Using this information, the home PC can download content from the distribution service and save it on the rendering device for future playback. Only the content obtained using this particular authentication information can be played on this particular rendering device.
In block 332, when the student graduates or is no longer enrolled at the school, the registration for his/her rendering device is revoked and no more content from the distribution service used by the college can be downloaded.
Embodiments of the present invention may be implemented using hardware, software, or a combination thereof and may be implemented in one or more computer systems or other processing systems. In fact, in one embodiment, the invention is directed toward one or more computer systems capable of carrying out the functionality described herein. An example implementation of a computer system 400 is shown in
Computer system 400 includes one or more processors, such as processor 403. Processor 403 is connected to a communication bus 402. Computer system 400 also includes a main memory 405, preferably random access memory (RAM) or a derivative thereof (such as SRAM, DRAM, etc.), and may also include a secondary memory 410. Secondary memory 410 may include, for example, a hard disk drive 412 and/or a removable storage drive 414, representing a floppy disk drive, a magnetic tape drive, an optical disk drive, etc. Removable storage drive 414 reads from and/or writes to a removable storage unit 418 in a well-known manner. Removable storage unit 418 represents a floppy disk, magnetic tape, optical disk, etc., which is read by and written to by removable storage drive 414. As will be appreciated, removable storage unit 418 includes a computer usable storage medium having stored therein computer software and/or data.
In alternative embodiments, secondary memory 410 may include other similar means for allowing computer programs or other instructions to be loaded into computer system 400. Such means may include, for example, a removable storage unit 422 and an interface 420. Examples of such may include a program cartridge and cartridge interface (such as that found in video game devices), a removable memory chip (such as an EPROM (erasable programmable read-only memory), PROM (programmable read-only memory), or FLASH memory) and associated socket, and other removable storage units 422 and interfaces 420 which allow software and data to be transferred from removable storage unit 422 to computer system 400.
Computer system 400 may also include a communications interface 424. Communications interface 424 allows software and data to be transferred between computer system 400 and external devices. Examples of communications interface 424 may include a modem, a network interface (such as an Ethernet card), a communications port, a PCMCIA (personal computer memory card international association) slot and card, a wireless LAN (local area network) interface, etc. Software and data transferred via communications interface 424 are in the form of signals 428 which may be electronic, electromagnetic, optical or any other signals capable of being received by communications interface 424. These signals 428 are provided to communications interface 424 via a communications path (i.e., channel) 426. Channel 426 carries signals 428 and may be implemented using wire or cable, fiber optics, a phone line, a cellular phone link, a wireless link, and other communications channels.
In this document, the term “computer program product” refers to removable storage units 418, 422, and signals 428. These computer program products are means for providing software to computer system 400. Embodiments of the invention are directed to such computer program products.
Computer programs (also called computer control logic) are stored in main memory 405, and/or secondary memory 410 and/or in computer program products. Computer programs may also be received via communications interface 424. Such computer programs, when executed, enable computer system 400 to perform the features of the present invention as discussed herein. In particular, the computer programs, when executed, enable processor 403 to perform the features of embodiments of the present invention. Accordingly, such computer programs represent controllers of computer system 400.
In an embodiment where the invention is implemented using software, the software may be stored in a computer program product and loaded into computer system 400 using removable storage drive 414, hard drive 412 or communications interface 424. The control logic (software), when executed by processor 403, causes processor 403 to perform the functions of the invention as described herein.
In another embodiment, the invention is implemented primarily in hardware using, for example, hardware components such as application specific integrated circuits (ASICs). Implementation of hardware state machine(s) so as to perform the functions described herein will be apparent to persons skilled in the relevant art(s). In yet another embodiment, the invention is implemented using a combination of both hardware and software.
While various embodiments of the present invention have been described above, it should be understood that they have been presented by way of example only, and not limitation. It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined in the appended claims. Thus, the breadth and scope of the present invention should not be limited by any of the above-described exemplary embodiments, but should be defined in accordance with the following claims and their equivalents.
