Patent Application
20100127064
1. Field of the Disclosure
The present disclosure generally relates to content delivery networks and more particularly to secure voting via a multimedia processing resource communicatively coupled to a content delivery network.
2. Description of the Related Art
Voters traditionally visit polling places to participate in government elections. At the polling places, the identities of the voters may be verified using picture identification cards. Voting that is remote from the polling places may be conducted.
Disclosed embodiments provide secure and auditable voting via a multimedia processing resource (MPR) such as a set-top box (STB). This allows interaction between users and content providers that enables voting for political candidates from the users' homes in a secure way that validates specifically who is voting, who or what they are voting for, and that only one vote per person is registered. In addition to enabling secure voting in government elections, disclosed embodiments may be used for interactive participation in television game shows, voting for a favorite contestant in a reality show, and participating in all levels (e.g., nationwide or citywide) of political voting in a secure way using landlines or cellular wireless technology to validate the authenticity of a voter.
In one aspect, a disclosed voting server receives votes from an MPR and executes instructions for determining whether a user location is an approved location and determining whether an MPR communication path is an approved path. Determining whether the MPR communication path is an approved path may include validating that an indicator for a portion of the MPR communication path is stored in a line information database (LIDB), which may be a wireless or wireline database. Determining whether the MPR location is an approved location may include receiving an indication that an approved mobile telephony device is within a predetermined proximity of the MPR. This may include using a localized protocol (e.g., Bluetooth or WiFi) that provides an indication of whether the mobile telephony device is in relative proximity to the MPR. If the user location is an approved location and the MPR communication path is an approved path, the voting server executes instructions for accessing ballot data, presenting a ballot based on the ballot data to a user, and accepting a user input to select an element from the ballot. In some embodiments, the voting server executes instructions for determining whether a user identity is valid, for example, by validating textual login credentials provided by the user to a mobile telephony device. In addition, biometric data may be received from the user to verify whether the user identity is valid. As further means of voter identity verification, an MPR location may be verified as an approved voting location for the user.
In another aspect, a disclosed MPR includes a network interface for communicating with a content provider over a communication path associated with an LIDB identifier. The disclosed MPR also has a wireless interface for receiving location data to determine whether a user location is an approved voting location and has a ballot module for presenting a ballot to the user. The MPR further includes a remote control interface for accepting user input to select elements from the ballot. In some embodiments, the MPR further includes a satellite interface for determining whether a location of the multimedia processing resource is an approved voting location. A voter profile module may be stored on or accessed by the MPR to verify the user as an approved voter. The MPR may further include a communication device data module for verifying whether a mobile telephony device associated with the user is local to the MPR.
In still another aspect, a disclosed service accepts votes from an MPR in response to a voting server determining that an MPR communication path is an approved path and determining that a user location is an approved voting location. The MPR presents a ballot to a user and accepts user input to select at least one element from the ballot. In some embodiments, the service further includes detecting whether a user location is local to the MPR and determining whether the MPR location is a designated voting location for the user.
In the following description, examples are set forth with sufficient detail to enable one of ordinary skill in the art to practice the disclosed subject matter without undue experimentation. It should be apparent to a person of ordinary skill that the disclosed examples are not exhaustive of all possible embodiments.
Disclosed embodiments promote secure voting using more than one level of validation including location verification of the user (i.e., a potential voter), location verification the MPR used to receive or process the votes, and location verification of a communication device within a predetermined proximity to the MPR. In addition, a communication path used by the MPR (e.g., an STB) or the communication device (e.g., a mobile telephone) may be verified using data accessed from an LIDB, for example. In an example scenario, if an MPR communicates with a content provider through a digital subscriber line, the content provider (e.g., a multimedia content distribution network) may access data for the subscriber line from an LIDB to determine whether a user is an approved voter for that line.
In addition to validating whether a potential voter is an approved voter by analyzing whether the potential voter is communicating over an approved communication path, other methods of validation may be used. In some embodiments, voter credentials may be provided to an MPR, for example, to allow the voter to login to a voting server to access a ballot. Voter credentials may include a voter identification number, a Social Security number, a driver's license number, a date of birth, a password, a personal identification number (PIN) and other such information. The voter credentials may be stored on an MPR local to the user (i.e., potential voter) or may be stored on a network device that is accessible by a voting server.
Another level of validation that disclosed embodiments may use to determine that a potential voter is an approved voter includes verifying that a communication device (e.g., a mobile telephone) that is local to (i.e., within a predetermined proximity) an MPR is associated with an approved voter. For example, if a potential voter John Doe wishes to vote in a national election, John Doe may attempt to vote using his MPR, which may be an STB he typically uses to access multimedia content including digital television, video on-demand movies, sporting events, and Internet content. Accordingly, John Doe may turn to a voting channel on the MPR, which accesses information from a voting server hosted by the multimedia content distribution network (e.g., an Internet protocol (IP) television network). John Doe may then be asked to enter login credentials which verify that he is, in fact, John Doe, or at least a person who knows John Doe's login credentials (e.g., a password, voter ID, or the like). If John Doe's login credentials are verified, his MPR may determine whether it is in local communication with John Doe's cellular telephone. For example, if his MPR and cellular telephone are Bluetooth enabled, a local communication link may be verified. Alternatively, if his MPR and cellular telephone are WiFi enabled, a local WiFi communication link may be verified. As a further means of validation, the MPR may report the existence and strength of the local communication link to the voting server. Depending on the settings of the voting server, a voting ballot may be provided to the MPR and consequently to John Doe if the login credentials are matched and local communication is verified. If further verification is needed by the voting server before providing the ballot, other means of validation may be employed.
As a further example means of validation, location information associated with John Doe's MPR and/or cellular telephone may be accessed and verified by the MPR and voting server. Some voting servers may require that John Doe is at home or another approved location in order to vote using an MPR. Accordingly, a voting server may verify that John Doe's MPR, while used for voting, is communicating over an approved communication link, such as a wireline associated with John Doe. Alternatively, if John Doe's cellular telephone is global positioning system (GPS) enabled, coordinates for his cellular telephone may be accessed by a voting server or his MPR to otherwise verify that John Doe is voting from an approved location. In operation, the voting server may access the GPS coordinates of John Doe's cellular telephone through a local communication link with the MPR or by requesting the information from his cellular network.
Therefore, if a voting server seeks to detect whether a potential voter who claims to be John Doe is properly voting, it may employ any of the above techniques for validation that the potential voter is John Doe. So if the voting server determines that a potential voter has correctly entered John Doe's voter credentials, determines that John Doe's cellular telephone is in local communication with an approved MPR associated with John Doe, determines that the approved MPR is using an approved line (e.g., an approved digital subscriber line) associated with John Doe, and determines that John Doe's cellular telephone indicates it is at an approved voting location (e.g., his home), the voting server may operate with the assumption that the potential voter is John Doe. Accordingly, the voting server may present John Doe with a ballot (e.g., a voting list) and accept input to select one or more elements from the ballot.
In some embodiments, post-voting activity may occur to inform John Doe of the voting that has taken place under his identity. For example, an e-mail, text message, voicemail, or other indication may be sent to a communication device or account (e.g., email account) associated with John Doe to inform him that voting has occurred under is identity. Some embodiments may also capture biometric data such as fingerprint data to verify the identity of a potential voter. A photograph may also be taken of a potential voter and stored for future reference in case there is a need to verify the identity of a voter. Disclosed embodiments may also verify whether John Doe has previously voted and prevent duplicate votes under his identity.
In addition to the techniques disclosed above, other voter identity verification techniques may also be employed with disclosed embodiments. For example, if the voting server discussed above receives a request from a potential voter who claims to be John Doe, the voting server may send a text message, voice message, or institute a telephone call to John Doe and request verification that John Doe is attempting to vote. Biometric data may be captured, voice recognition techniques may be employed, or other verification techniques may be employed during this step to accurately determine whether the potential voter is John Doe.
In this way, disclosed embodiments promote secure electronic voting that is remote from traditional polling places. Voting results may be audited, and recounts of votes may be done automatically by data processing systems (e.g., computers). While such secure voting may be employed for governmental elections, other uses of disclosed embodiments may not require such a high level of security. For example, if a reality television program or televised competition invites viewers to vote on contestants, a lower level of verification of voter identification may be employed. However, some combination of the above techniques may be used to verify or ensure that only an approved number of votes are received. In addition, the above techniques may be used to allow viewers to participate in interactive game shows that invite viewers to respond to questions (e.g., trivia questions) presented in real time. In such cases, a game show may employ a voting server that verifies that a single contestant is providing answers for the game show, and that contestants at different locations are not improperly competing under one voter identification.
Referring to
Operating system 169 may be a Unix® or Unix-like operating system, a Windows® family operating system, or another suitable operating system. Ballot application 182 presents ballots to a voter in response to verifying the identity of the voter using disclosed techniques. Ballot application 182 includes or accesses ballot data containing, for example, the names of contestants or candidates that are presented as selectable elements within an on-screen ballot. Ballot application 182 may operate in conjunction with a remote ballot application, which may be hosted on an application server (e.g., voting server 173) or on a content delivery server of content provider 130, to facilitate receiving votes from validated users of MPR 124 in a secure fashion.
In operation, MPR 124 is enabled to receive votes from users who are validated as eligible voters using some combination of disclosed identity verification techniques. Users may use remote control device 177 to navigate to a channel or portal provided by content provider 130. A user (i.e., potential voter) may enter log-in credentials using remote control device 177 through a user interface presented on display 122.
Communication device data 117 may include identifiers for approved communication devices to permit voting via MPR 124. For example, communication device data 117 may store network identifiers for wireless telephony device 189 which is in local communication via local communication link 141 through wireless interface 135 with MPR 124. Local communication link 141 may be Bluetooth, WiFi, infrared, or another localized communication protocol. By verifying that wireless telephony device 189 is within a predetermined range of MPR 124, by verifying that wireless telephony device 189 is associated with an approved voter, and by assuming that the approved voter is in possession of wireless telephony device 189, disclosed systems may promote secure voting by verifying the identity of the approved voter.
MPR 124, as depicted in
Video and audio streams 138 and 136, as output from A/V decoder 137, may include audio or video information that is compressed, encrypted, or both. A/V decoder 137 may employ any of various widely distributed video decoding algorithms including any of the Motion Pictures Expert Group (MPEG) standards, Windows Media Video (WMV) standards including WMV 9, which has been standardized as Video Codec-1 (VC-1) by the Society of Motion Picture and Television Engineers. Similarly A/V decoder 137 may employ any of various audio decoding algorithms including Dolby® Digital, Digital Theatre System (DTS) Coherent Acoustics, and Windows Media Audio (WMA). The video and audio streams 138 and 136 as shown in
As shown, GPS satellite system 151 also communicates with wireless telephony device 189 to establish its location. This location may be relayed over communication link 141 to MPR 124 and then to voting server 173. If a user (i.e., potential voter) attempts to vote using MPR 124, voting server 173 may verify that mobile telephony device 189 is within a predetermined proximity (e.g., within 100 feet) of MPR 124 by verifying the existence of communication link 141. In addition, biometric data (e.g., iris data) for the user may be captured by biometric sensor 163 and provided to MPR 124 through biometric acquisition interface 153. The biometric data may be compared to user profiles 123, which contains a store of approved voter information, log in credentials, and the like.
If the existence of local communication link 141 is verified and if biometric acquisition interface 153 receives data that appears associated with an approved voter, voting server 173 may verify that MPR 124 is communicating with content provider 130 over an approved communication path. To do this, voting server 173 may access LIDB 167 and verify that communication path 165 is associated with an approved voter that is also associated with mobile telephony device 189 and MPR 124. If communication path 165 is verified as associated with an approved voter, MPR 124 may encode within video signal 138 and/or audio signal 136 ballot 196, which contains selectable elements.
Referring now to
Some embodiments of methodology 200 may also include determining whether a user identity is valid, such as by receiving biometric data from a user. In addition, determining whether a user identity is valid may include determining whether received textual data is from an approved mobile telephony device. Methodology 200 may optionally include other elements such as determining whether an MPR location is an approved voting location. This determination may be made by receiving an indication that an approved mobile telephony device is within a predetermined proximity of the MPR. A predetermined proximity, for example, may be indicated by receiving a Bluetooth signal, a WiFi signal, an infrared signal, a radio signal, an acoustic signal or other type of signal that is typically transmitted over a limited distance. In some embodiments, a local communication link between an MPR and an approved mobile telephony device may indicate that the approved mobile telephony device is local to the MPR. For example, the mobile telephony device may transmit to or receive from the MPR a Bluetooth protocol signal. In some embodiments, the mobile telephony device transmits to the MPR a Bluetooth protocol signal that includes GPS data indicating the current or last verified coordinates of the mobile telephony device. If the current or last verified coordinates of the mobile telephony device indicate that it is at or in close proximity to an approved voting location, and a local communication link is verified between the MPR and the mobile telephony device, a voting server may conclude that an approved voter is voting from an approved voting location. In such embodiments, the approved voter is presented with a ballot and provided an opportunity to vote. Voters may also be presented an opportunity to provide write-in candidates by entering new elements to a ballot.
While the disclosed subject matter has been described in connection with one or more embodiments, the disclosed embodiments are not intended to limit the subject matter of the claims to the particular forms set forth. On the contrary, disclosed embodiments are intended to encompass alternatives, modifications and equivalents.
