Patent Application
20090320058
This invention relates to the field of broadcast programming reception systems, and, more particularly, to subscription based broadcast programming reception and distribution to multiple dwelling units.
Subscription based broadcast program distribution for multiple dwelling unit facilities such as hotels, apartment complexes and university campuses, may be analogized to multiple implementations of reception systems for single dwelling units, such as single family homes. The present invention will be discussed as it relates to satellite television broadcast reception systems, such as DIRECTV™-based Digital Broadcast Systems (DBSs). It should be understood however, that the present invention has applicability to a wide range of broadcast distribution systems, such as cable television systems and distribution systems that utilize the global interconnection of computers and computer networks commonly referred to as the Internet.
Generally, a satellite television system includes an antenna (including a dish), a low noise block down-converter (LNB), a satellite receiver (set-top box) and a television set (TV). The satellite receiver allows a user to tune a desired channel for viewing, and is normally connected to the TV directly. Conventionally, if another user wants another TV with independent channel control, that user needs to employ a separate set-top box in conjunction with that TV.
It is common to provide restricted content via a satellite television system, a non-limiting example being pay-per-view (PPV) access programming. To provide access to such programming, a conditional access (CA) module is conventionally supplied with each receiver. However, due to the distributed nature of the receivers, CA modules themselves may be relatively unsecured. This is particularly problematic in hotel accommodations, where it is believed the theft of CA modules from receivers is common.
Also, to provide satellite service to several units in multiple dwelling units, separate satellite receiver boxes are conventionally used with each TV. In addition to the cost of buying additional satellite receivers, each additional satellite receiver is generally placed in a different dwelling unit. As such, each dwelling unit typically requires a telephone jack for providing a telephone callback link for the set-top box housed therein. As is understood by those possessing an ordinary skill in the pertinent arts, a callback link is provided to communicate billing or other information from a satellite receiver to a video source. Where billing data is temporarily stored at the distributed locations, there is a risk that communication with one or more of the local set-top boxes will be interrupted, resulting in the billing information not being timely reported to the broadcast source. This leads to lost revenue for the broadcast provider.
Accordingly, it is believed to be desirable to provide a multiple dwelling unit multimedia content distribution system and method that provides for centralized billing information collection and provision to a service provider, as well as security for CA modules themselves.
A method for distributing video programs in a multiple dwelling unit from a receiver device associated with the unit to a plurality of client devices located in the multiple dwelling unit, including: receiving a plurality of video programs associated with a plurality of television channels from a signal source; receiving a request for a particular video program associated with a particular television channel from a selected one of the plurality of client devices; confirming that an account associated with the selected client device is authorized to receive the particular video program on the particular television channel; descrambling the particular video program using account data associated with the selected client device in response to the confirmation; re-scrambling the descrambled particular video program using a local key associated with the selected client device and transmitting the re-scrambled video program to the selected client device; and maintaining account data associated with each of the client devices in the receiver and transmitting updated account data to the signal source.
Understanding of the present invention will be facilitated by considering the following detailed description of the preferred embodiments of the present invention taken in conjunction with the accompanying drawings, in which like numerals refer to like parts, and:
It is to be understood that the figures and descriptions of the present invention have been simplified to illustrate elements that are relevant for a clear understanding of the present invention, while eliminating, for the purpose of clarity, many other elements found in typical subscription based broadcast, reception and presentation systems and methods. Those of ordinary skill in the art may recognize that other elements and/or steps are desirable and/or required in implementing the present invention. However, because such elements and steps are well known in the art, a detailed discussion of such elements and steps is not provided herein.
According to an aspect of the present invention, a video head-end offloads the conditional access and PPV billing functions of the various video set-top boxes in a multiple dwelling unit structure. “Video head-end”, as used herein, generally refers to a control center of a subscription based programming delivery system, where broadcast signals are received and distributed to multiple dwelling units. In such a configuration, the video head-end tunes to the desired transponder(s), de-multiplexes the program stream(s), and delivers the program streams to individual client devices (e.g., set-top boxes) located in the dwelling units. By essentially re-locating the conditional access modules to the head-end, CA module theft may be prevented by securing the head-end (e.g., in a wiring closet).
The head-end may utilize conventional copy protection mechanisms to ensure that content indicative signals it delivers to the client devices are not “in the clear” over the transmission medium, which may take the form of Category 5 (Cat5) wiring or QAM-based Ethernet, for example. Candidate copy protection schemes include SmartRight, which is commercially available from the assignee hereof, Thomson Multimedia, and IPsec implementations. For non-limiting purposes of explanation, IPsec (short for IP security) is a set of protocols developed by the Internet Engineering Task Force (IETF) to support secure exchange of packets at the Internet Protocol (IP) layer. IPsec has been conventionally deployed to implement Virtual Private Networks (VPNs). IPsec supports two encryption modes: transport and tunnel. Transport mode encrypts only the data portion (payload) of each packet, but leaves the header untouched. The more secure tunnel mode encrypts both the header and the payload. On the receiving side, an IPsec-compliant device decrypts each packet. Either the transport or tunnel mode may be used with the content distribution system and method of the present invention.
According to an aspect of the present invention, each client device communicates programming, such as pay-per-view (PPV) requests to the head-end, which authorizes the transaction and sends the requested program to the requesting client device. The head-end aggregates purchases from the client devices, and communicates with a service provider, such as DIRECTV™, via a callback link, in a same manner as conventional individual set-top boxes. However, the head-end sends aggregated program billing information for the multiple dwellings, e.g., multiple service provider accounts, to the service provider for processing. As will be readily ascertained, this permits easier billing for the service provider and eliminates the need for each dwelling unit housed client device to be connected to a separate callback link, such as a phone line.
Referring now to
Each television 30, 50, 60 is associated with a remote control (not shown) for sending a wireless remote control signal including channel selection information to satellite receiver 20, which tunes to the specified channel for that television. Satellite receiver 20 can tune to a different channel for each television, so that each television can display a different program simultaneously. Upon receiving the broadcast video signals at an input terminal, or port, 21 from the antenna 10, the satellite receiver 20 tunes to channels in response to respective remote control signals, and provides the video signals from the respective channels to televisions 30, 50, 60 via port 22.
Each television 30, 50, 60 may be, but is not limited to, a display supporting HDTV (High Definition Television) formats and/or SDTV (Standard Definition Television) formats. Each television 30, 50, 60 is communicatively coupled to an associated client device 35, 55, 65, which is in-turn coupled to receiver 20 via communications network 40. Devices 35, 55, 65 may be communicatively coupled to televisions 30, 50, 60 via conventional coaxial cables, component connections and/or digital links, e.g., high density multimedia input (HDMI) connections, respectively.
Network 40 may take the form of a data network, such as wireless and/or wired network, e.g., a user datagram protocol (UDP) compliant network, such as a TCP/IP network. Where a wireless network 40 is used (e.g., an 802.11x compliant network), receiver 20 may optionally include a transceiver, such as a radio frequency (RF) transmitter, receiver and antenna. Alternatively, a separate wireless network interface may be used and be communicatively coupled to receiver 20. In either case, satellite receiver 20 and client devices 35, 55, 65 communicate through network 40, and satellite receiver 20 converts the tuned video signals into packets having network 40 addresses of the network clients 35, 45, 55, which may be wireless or wired, as destination addresses so that received content is provided to televisions 30, 50, 60.
For billing and other administrative purposes associated with each client 35, 45 and 55, satellite receiver 20 also includes a callback link 25 port 23. Callback link 25 may take the form of a plain old telephone system (POTS) link to the service provider, so that a user can, for example, purchase PPV programming. This callback link may be shared by all televisions 30, 50, 60, operate responsively to user interaction with device 35, 55, 65 devices, and operate dependently upon user accounts associated with these devices. Accordingly, multiple callback data streams from individual devices 35, 55, 65 corresponding to different user accounts with a service provider may be aggregated and transmitted using a same callback link. Advantageously, this allows a system 100 operator to store billing information at a secure location, e.g., at receiver 20, rather than within each device 35, 55, 65. In this way, should any of devices 35, 55, 65 be individually disconnected, prior billing information (that may correspond to purchased PPV events) that has not yet been transmitted to the broadcast provider is not lost or delayed.
Referring now also to
Each tuner 205, 210, 215 may be associated with a television/client device 30/35, 50/55, 60/65 pair. Alternatively, each tuner may be associated with a separate transponder available for tuning. Thus, the number of tuners provided may be associated with either the number of television/client device pairs in system 10, and/or the number of transponders available for tuning. Of course, statistical considerations may be applied in determining a number of tuners required, such that a one-to-one correspondence may not be necessary. In the illustrated case of
CA module 240 may take the form of a collection of conventional conditional access service providing smart cards. Each smart card provides the ability to facilitate descrambling a collection of transport streams (associated with a program). As receivers are added to the distribution network, smart cards can be allocated on a one-to-one basis (one smart card, one receiver). In this process, whenever a new receiver is added to the network it is authenticated by securely collecting receiver ID information and associating this information with a specific customer account and the specific smart card. This may be accomplished by having the smart card securely “call back” to the service with sufficient information to do the association and validation. Once this is accomplished, the service transmits to the smart card sufficient secret information to enable it to support descrambling of programs for the specific receiver ID. In such a configuration, the controller may maintain a map of receiver IDs to specific smart card in order to process correctly program requests from the receivers.
Depending on the capability of the smart cards (internal memory storage, processing capability, bandwidth access) and the system service, multiple receivers and even multiple accounts can be associated with a single card. The manner of mapping may be identical to the above except that a single card can support multiple programs and accounts.
Further yet, a secure multi-program, multi-account conditional access processor can be implemented. In this case, a single conditional access processor could be used to support all, or groups, of receivers on the distribution network. The allocation and authentication process may be identical to that described above. Sufficient secure memory, processing power, and interface bandwidth may be integrated into the device to support the maximum number of receivers on the distribution network. In such a case, a field programmable gate array (FPGA) may be used with a conventional, high-speed secure processor to aggregate the conditional access functionally of the multiple smart cards. Either way, relocating CA services to the head-end serves to reduce costs and user confusion associated with CA implementing set-top boxes, and simplifies the billing function for both a user and a service provider. Receiver 20′ will be discussed as it relates to a CA module 240 incorporating multiple, conventional conditional access modules, e.g., smart cards, for non-limiting purposes of explanation only.
Receiver 20′ further includes a packet formatter 250, and network interface 260. Packet formatter 250 is preferably adapted for use with network interface 260 and network 40. The demodulated video streams, which may include MPEG-2 packets for example, are fed to packet formatter 250, which formats the delivered packets into network 40 deliverable packets, e.g., IP packets, using conventional methods. The IP packets are then transmitted through the network 40 to the client devices 35, 55, 65, respectively, using network interface 260. Packet formatter 250 may attach an IP address of the one of the devices 35 associated with the tuner 205. Like packet formatter 250, network interface 260 is preferably adapted for use with network 40 (e.g., a TCP/IP network). In the illustrated embodiment, network interface 260 is communicatively coupled to: packet formatter 250—to receive formatted packets for delivery to client devices 35, 55, 65 via network 40; CA module 240 for providing interconnectivity between CA module 240 and the client devices 35, 55, 65 via network 40; and controller 230, for providing interconnectivity between controller 230 and client devices 35, 55, 65 via network 40. The configuration and use of packet formatters and network interfaces are well known in the pertinent arts.
Receiver 20′ also includes a modulator/demodulator (MODEM) 270 suitable for communicating with the broadcast, e.g., programming, source via the callback link, e.g., a POTS or Internet connection, via port 23.
Referring now also to
If the requesting client device 35 is authorized to receive the requested content, the CA implementing smart-card of CA module 240 associated with tuner 205 and/or television/client device pairing 30/35 receives the data stream indicative of the requested content from tuner 205, and performs conventional conditional access processing on the received data stream to enable television/client device pairing 30/35 to present the content (process 340). For example, CA module 240 may access descrambling keys and descramble the data indicative content using client device 35 associated account data in a conventional manner. The accessed content may then be re-secured for transmission to the television/client device pairing 30/35 via network 40. The processed data stream is then provided to packet formatter 250 for conventional formatting, and thereafter the formatted, processed data stream is provided to network interface 260 for provision to client device 35 via network 40 (process 360). Finally, controller 230 may maintain account data associated with television/client device pairing 30/35 (process 370)—such as by updating account billing information associated with the requesting client device 35 to reflect that a content request was received and/or authorized.
By way of further, non-limiting example, a user may interact with client device 35 using a remote control and graphical user interface (GUI) in a conventional manner to request presentation of a particular program, such as a PPV event. Data indicative of the user request is received by receiver 20′ from client device 35 via network 40, port 22 and network interface 260. According to an aspect of the present invention, controller 230 processes the received request to identify and authenticate the requesting client device 35. Alternatively, CA module 240 may authenticate the requesting device 35. Either way, device 35 identification and authentication may be performed in a conventional manner, such as by checking a source address for the request, time for the request and digital signature attached to the request. According to alternative aspects of the present invention, tuner 205 may be instructed to tune a transponder corresponding to the received request either before, during or after device identification and/or authentication.
Once identified and authenticated, controller 230 may process account data corresponding or correlating to the requesting client device 35 and service provider, to confirm that an account associated with the requesting client device is authorized to receive the requested content. For example, in the case of a PPV event, controller 230 may confirm requested PPV content is authorized for delivery by checking subscription data for the account associated with the requesting device 35, and updating the subscription data to reflect the PPV event if that event has not been previously purchased and is available for purchase by the client device 35.
Thereafter, controller 230 may advise CA module 240 of the permission to access, to authorize CA module 240 to operate in conjunction with the requesting device 35 to deliver the requested content. In response, CA module 240 engages conventional conditional access process(es) to access the authorized content, e.g., accesses descrambling keys and descrambles the authorized content using account information associated with the requesting device 35. CA module 240 may communicate with the requesting device 35 via network 40 to establish one or more re-scrambling keys for frustrating un-authorized access of the content transmission from receiver 20′ to requesting device 35. For example, CA module 35 may encrypt a local scrambling key, e.g., a symmetric key, used to re-scramble the content using the key first used to authenticate the digital signature associated with the request. In such a case, only the authenticated and authorized requesting device may access the key, which may then be used to descramble the requested content upon receiving the same in a conventional manner. By way of further non-limiting explanation, a private key of a public/private key pairing corresponding to device 35 may be used by device 35 to sign the request, and access the symmetric key; while the public key of the public/private key pairing is used to authenticate device 35 and encrypt the symmetric key for transmission to device 35 by receiver 20′.
Referring now also to
Controller 480 may be used to receive scrambling keys from CA module 240 (e.g., the symmetric key) and forward it to descrambler 420 for processing received content indicative data. Descrambler 420 in-turn feeds a conventional decoder, e.g., an MPEG decoder, for decoding the received content data stream into a decoded stream. Where the associated television 30 is a digital television or other device capable of directly processing such decoded streams, the resulting signal may be directly provided via port 465. Where an analog television 30 is used, the signal may be encoded with a standard television format, such as NTSC, PAL, or SECAM using a conventional encoder 440, processed by a conventional digital to analog converter 450 and modulated for reception and presentation by television 30 using a conventional modulator 460. Optionally, graphics, text, and/or video generated by a user interface 470 responsively to controller 480 can be conventionally combined with or replace the decoded video stream before modulation for transmission to television 30.
Controller 480 may operate in conjunction with user interface 470 in a conventional manner to facilitate user operation of device 35′. For example, controller 480 and user interface 470 may cooperatively present PPV events available for purchase on a connected television, detect user selections thereof via user interaction with a remote control, and forward the selections to controller 230 of receiver 20′ in a conventional manner.
It will be apparent to those skilled in the art that modifications and variations may be made in the apparatus and process of the present invention without departing from the spirit or scope of the invention. It is intended that the present invention cover the modification and variations of this invention provided they come within the scope of the appended claims and their equivalents.
| Filing Document | Filing Date | Country | Kind | 371c Date |
|---|---|---|---|---|
| PCT/US2005/044102 | 12/6/2005 | WO | 00 | 10/1/2007 |
| Number | Date | Country | |
|---|---|---|---|
| 60668377 | Apr 2005 | US |
