US20110219430A1 - Secure networked system for controlling mobile access to encrypted data services - Google Patents
Secure networked system for controlling mobile access to encrypted data services Download PDFInfo
- Publication number
- US20110219430A1 US20110219430A1 US13/107,112 US201113107112A US2011219430A1 US 20110219430 A1 US20110219430 A1 US 20110219430A1 US 201113107112 A US201113107112 A US 201113107112A US 2011219430 A1 US2011219430 A1 US 2011219430A1
- Authority
- US
- United States
- Prior art keywords
- mobile device
- access
- mobile
- control server
- access control
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/16—Implementing security features at a particular protocol layer
- H04L63/166—Implementing security features at a particular protocol layer at the transport layer
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/03—Protecting confidentiality, e.g. by encryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
- H04W12/069—Authentication using certificates or pre-shared keys
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/08—Access security
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
- H04L67/125—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks involving control of end-device applications over a network
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/30—Definitions, standards or architectural aspects of layered protocol stacks
- H04L69/32—Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
- H04L69/322—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions
- H04L69/329—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions in the application layer [OSI layer 7]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W74/00—Wireless channel access, e.g. scheduled or random access
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W80/00—Wireless network protocols or protocol adaptations to wireless operation
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W84/00—Network topologies
- H04W84/02—Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
- H04W84/04—Large scale networks; Deep hierarchical networks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W84/00—Network topologies
- H04W84/02—Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
- H04W84/10—Small scale networks; Flat hierarchical networks
- H04W84/12—WLAN [Wireless Local Area Networks]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W84/00—Network topologies
- H04W84/18—Self-organising networks, e.g. ad-hoc networks or sensor networks
Definitions
- the present invention relates to providing secure access to data services for mobile devices.
- the Internet is an open system in which the identity of communicating users is not easy to determine and authenticate. Further, the communication channel is non-physical and therefore is vulnerable to eavesdropping and active interference. Thus, communicating over the Internet is much like communicating with anonymous postcards, which are open for anyone to read, or even alter.
- the Internet may be used to carry messages between specific endpoints in a relatively secure and private way by using encryption.
- problems may still arise, for example, from a “man-in-the-middle” attack made to gain knowledge over data, or to gain access to data and resources. It is important to note that these problems do not disappear with encryption or even use of a secure protocol. If a user is led to connect with a site that only appears to be the desired site (a “spoofing site”), a secure connection made with this site will provide no protection. Thus, identity certification, or authentication, is needed to assure that communication is between the desired users.
- the ITU-T Recommendation X.509 (the “X.509 standard”), which has been implemented as a de facto standard, defines a framework for providing authentication services under a central control paradigm represented by a directory.
- the X.509 standard describes two levels of authentication. The first, referred to as “simple authentication,” uses a password to verify claimed identity. The second, referred to as “strong authentication,” involves credentials that are formed using cryptographic techniques (a “certificate”).
- a certificate also known as a user certificate or public key certificate, includes the public keys of a user, and other information, which are rendered unforgeable by encipherment with the private key issued by a certification authority (“CA”).
- the certificate allows an association between a name for the user (a “unique distinguished name” or “DN”), and the user's public-key.
- the DN is denoted by a naming authority (“NA”) and accepted by a CA as unique within the CA's domain.
- NA naming authority
- the CA and the NA may be the same entity.
- the same user may have different DNs in different CAs. Alternately, the user may have the same DN in different CAs, even if a different user has already used the same DN in a CA.
- DNs in different CAs do not necessarily correspond to different users and vice-versa. Further, a DN does not have to contain the user's actual name or location. Thus, semantically, the CA certificate refers to a name; however, the certificate does not denote the name.
- the X.509 standard focuses on defining a mechanism by which information can be made available to a user in a secure way.
- the X.509 standard is not meant to address the level of effort required to validate the information in a certificate, or define a global meaning to that information outside the CA's management acts.
- the main purpose of a CA is to bind a public key to the name contained in the certificate, and thus assure users that some measure of care was taken to ensure that this binding is valid for both the name and key.
- a user's DN actually corresponds to identity credentials that are linked to a person or to an e-mail address, and how such a link is verified is outside the scope of the X.509 standard.
- the resolution of these issues depends on each CA's self-defined rules, called CPS.
- SSL Secure Sockets Layer
- HTTP over SSL hypertext transfer protocol over secure socket layer
- HTTPS hypertext transfer protocol over secure socket layer
- SSL is protocols that support the use of digital certificates issued from a server under the X.509 standard (“X.509 certificates”). If necessary, a user can use the certificate to authenticate a sender.
- SSL is commonly-used for managing the security of message transmission over the Internet (see Freier et al, “The SSL protocol version 3.0,” Internet Draft, Nov. 18, 1996, available at http://www.ietf.org).
- SSL may provide a framework for defining an authentication procedure for users (the communication endpoints), and procedures for establishing encrypted communication between users.
- SSL uses a program layer located between the Internet's Hypertext Transfer Protocol (“HTTP”) and Transport Control Protocol (“TCP”) layers.
- HTTP Hypertext Transfer Protocol
- TCP Transport Control Protocol
- SSL is included as part of both the MICROSOFT® and NETSCAPE® browsers and most Web server products. Developed by NETSCAPE®, SSL also gained the support of MICROSOFT® and other Internet client/server developers and became the de facto standard until evolving into Transport Layer Security (“TLS”), which is based on SSL.
- TLS Transport Layer Security
- the “sockets” in Secure Socket Layer refers to the sockets method of passing data back and forth between a client and a server program in a network, or between program layers in the same computer.
- SSL uses the public-and-private key encryption system by RSA (Rivest, Shamir and Adleman), which also uses digital certificates.
- TLS and SSL are an integral part of most Web browsers (“clients”) and Web servers. If a Web site is on a server that supports SSL and SSL is enabled, specific Web pages may be identified as requiring SSL access. Any Web server may be enabled by using NETSCAPE®'s SSLRef program library, which may be
- HTTPS is a Web protocol developed by NETSCAPE® and built into the NETSCAPE® Web browser, which encrypts and decrypts user page requests and the Web pages that are returned by the Web server.
- HTTPS uses NETSCAPE®'s SSL as a sublayer under NETSCAPE®'s regular HTTP application layering, in which HTTPS may use port 443 instead of HTTP port 80 in its interactions with the lower layer, TCP/IP.
- SSL may use a 40-bit key size for the RC4 stream encryption algorithm, which may be considered an adequate degree of encryption for commercial communications.
- a mobile device for use in a vehicle may include a receiver for providing entertainment and a navigation system for providing trip planning.
- a mobile device for use in a vehicle may include a receiver for providing entertainment and a navigation system for providing trip planning.
- WAP wireless application protocol
- a mobile device for use in a vehicle may include a receiver for providing entertainment and a navigation system for providing trip planning.
- security has become an issue.
- Protocols such as the wireless application protocol (“WAP”), enable the users of mobile devices (such as devices that include integrated receivers) to gain access to Internet content. Access is gained, however, in a rather functionally reduced manner as compared to the access enabled by browsers on desktop computers.
- the browsers on desktop computers may use HTTP, Macromedia Flash, Java, JScript, and the like, for animating web page content and enabling enhanced navigation on web pages.
- the data service may include any type of service providing data in a wireless manner.
- the data service may be a broadcast service, such as digital radio or video.
- the networked system may include a mobile access control server, and may also include one or more mobile devices, and a content server.
- the content server may provide the data service using data in encrypted form.
- the mobile device which may be portable or fixed within a mobile body, such as a vehicle, may provide access to the data service.
- the mobile device may include a browser application that provides such access.
- the mobile device may provide functions such as entertainment and information processing.
- the networked system may also include a network that enables the other components of the networked system to be in communication with each other.
- the mobile device may make a request to the mobile access control server for access to the data service (an “access request”).
- This request may indicate the particular data service to which access is requested, and/or an identifier of the mobile device making the request.
- the mobile access control server may determine whether the mobile device is allowed to access the requested data service. The mobile access control server may make this determination based on the identifier supplied by the mobile device in an access request.
- the mobile access control server may initiate a subscription process that enables the mobile device to subscribe to the requested data service.
- the mobile access control server may provide information relating to the content server providing the requested data service (the “access information”) to the mobile device.
- the access information may include a certificate, such as an X.509 certificate. Alternately, or in addition, the access information may include a session key that enables the mobile device to decrypt the encrypted data service.
- the mobile access control server may determine whether the access information is stored within the mobile access control server. If the access information is not stored within the mobile access control server, the mobile access control server may request the access information from the content server or a certificate authority. The mobile access control server may then receive and store the access information.
- the mobile access control server may then communicate the access information to the mobile device via the network and perhaps through an access provider.
- the mobile access control server may provide a message to the mobile device indicating a location within the mobile access control server from which the access information may be obtained by the mobile device.
- the mobile device may request the access information in the location indicated in the message.
- the mobile access control server may communicate the access information to the mobile device, which may store the access information for current and/or later use.
- the mobile device may use the access information to establish an encrypted connection (or a “session,” for example when made within HTTPS) to the content server or to decrypt encrypted data communicated with the data service via the content server. Further, when trying to receive an encoded data service, such as an audio or video broadcast service, from a content server, the mobile device may only be capable of receiving and decoding the data that is provided with the correct session key. Hence, the access to data services may be controlled by a mobile access control server by only providing the mobile device with the necessary access information for successfully receiving the requested data service, if the mobile device is granted access to the service by the mobile access control server. This access control mechanism is also independent from the point of access of the mobile device to the network.
- the mobile device may determine whether the access information is stored in the mobile device itself. If the access information is stored in the mobile device, for example as the result of a previous access request, the mobile device may establish an encrypted connection to the content server or decrypt encrypted data provided by the data service via the content server using the stored access information.
- FIG. 1 is a diagram of a networked system for controlling access to a data service.
- FIG. 2 is a diagram of another networked system for controlling access to a data service.
- FIG. 3 is a flow chart of a method for controlling mobile access to a data source.
- FIG. 4 is a flow chart of another method for controlling mobile access a data source.
- FIG. 5 is a diagram of message flows among the components of the networked system shown in FIG. 1 during a situation in which the mobile device has stored a requested certificate locally.
- FIG. 6 is a diagram of message flows among the components of the networked system shown in FIG. 1 during a situation in which a mobile access control server requests a certificate from a content server.
- FIG. 7 is a diagram of message flows among the components of the networked system shown in FIG. 1 during a situation in which a content server redirects a mobile access control server to a certificate authority to requests a certificate.
- FIG. 8 is a diagram of message flows among the components of the networked system shown in FIG. 1 during a situation in which a mobile device may contact a content server directly.
- FIG. 9 is a diagram of message flows among the components of the networked system shown in FIG. 2 during a situation in which a mobile device requests permission from a user to establish an EM link with an access provider.
- FIG. 10 is a diagram of message flows among the components of the networked system shown in FIG. 2 during a situation in which a mobile device may not maintain constant communication with a mobile access control server.
- FIG. 11 is a diagram of message flows among the components of the networked system shown in FIG. 2 during a situation in which a mobile device establishes communication with a mobile access control server upon expiration of a timer.
- FIG. 1 An example of a secure networked system 100 for controlling access to a data service (a “networked system”) is shown in FIG. 1 .
- the networked system is shown for explanatory purposes, and other networked system may be used.
- the networked system 100 may include, alone or in any combination: a server for controlling mobile access (a “mobile access control server”) 120 , one or more mobile devices 150 , and systems (including devices and methods) for providing control of mobile access to a data service.
- the networked system 100 may also include a content server 130 through which one or more data services may be provided using data in encrypted form.
- a data service may include any type of service providing data in a wireless manner.
- the data service may be a broadcast service, such as digital radio or video.
- the networked system 100 may include a certificate authority (“CA”) 140 , which provides authentication by creating and issuing certificates.
- the networked system 100 may also include a network 160 that enables other components of the networked system to
- the mobile device 150 which may be portable or fixed within a mobile body, such as a vehicle (which may include automobiles, trucks and lorries, farming equipment, mining equipment, golf carts and mobile robots), may provide access to the data service.
- the mobile device may include a browser application that provides such access.
- the mobile device may provide functions such as entertainment and information processing.
- the mobile device 150 may include an electromagnetic (“EM”) module 101 .
- the EM module 101 may be capable of receiving and transmitting data using electromagnetic signals according to various wireless standards, such as the universal mobile telecommunications system (“UMTS”), global system for mobile communication (“GSM”), Bluetooth, and wide local area networks (“W-LAN”).
- UMTS universal mobile telecommunications system
- GSM global system for mobile communication
- WLAN wide local area networks
- the EM module 101 may be used, for example, as a mobile telephone or as a device providing a wireless uplink (mobile device to an access network) and a wireless downlink (access network to mobile device) to access other networks via the access network of a radio access provider 110 .
- the mobile device 150 may include a broadcast receiver 102 that may be used to receive broadcasted electromagnetic signals, such as AM, FM or digital audio broadcasting (“DAB”) signals, and/or digitally encoded data signals, such as radio data systems (“RDS”) signals that may be sent along with other EM signals.
- broadcasted electromagnetic signals such as AM, FM or digital audio broadcasting (“DAB”) signals
- DAS radio data systems
- the mobile device 150 may further include a processor 103 .
- the processor 103 may control the different components of the mobile device 150 , manage and process information such as device-internal data or RDS information, process and respond to user input, and perform other functions.
- the processor 103 may be any type of device or devices used to process digital information.
- the mobile device 150 may also include a navigation system 104 , or be in communication with an external navigation system. In either case, the processor 103 may be in communication and exchange data with the navigation system 104 .
- the mobile device 150 may include a user interface 105 .
- the user interface 105 may be any type of visual, manual, audio, electronic or electromagnetic device capable of communicating information from a processor or memory to a user or other processor or memory.
- the user interface 105 may also communicate information with the processor or memory.
- the user interface 105 may include output devices. Examples of output devices include, but are not limited to, monitors, speakers, liquid crystal displays, networks, buses, and interfaces.
- the mobile device 150 may enable user interaction with the networked system 100 by allowing a user to input data, such as, radio broadcast program selections, navigation destinations, and data for establishing phone calls and displaying traffic information.
- the mobile device 150 may include an input module 106 , which may be any type of visual, manual, mechanical, audio, electronic, or electromagnetic device capable of communicating information from a person, or memory to a processor or memory. Examples of input devices include keyboards, microphones, voice recognition systems, trackballs, mice, networks, buses, and interfaces.
- the user interface 105 and input module 106 may be included in a single device such as a touch screen, computer, processor or memory.
- the mobile device 150 may also include a memory 107 .
- the memory 107 may be any type of fixed or removable digital storage device and, may include a device for reading the digital storage device including, floppy disks and floppy drives, CD-ROM disks and drives, optical disks and drives, hard-drives, RAM, ROM and other such devices for storing digital information.
- the memory 107 may store user information, parameters as well as the programs and applications executed by the processor 103 .
- the mobile device 150 may access the network 160 through an access provider 110 that is in communication with the network 160 .
- the access provider may charge a time-based fee for access to the network.
- the mobile device 150 may be in communication with an access network of an access provider 110 over an EM link 112 using the EM module 101 .
- the access provider 110 may be in communication with the network 160 .
- the mobile device 150 may establish a WAP connection to a WAP gateway of the radio access provider 110 , to connect to the network 160 , which may include the Internet, and to receive data services from a content server 130 .
- Other connections may also be established, such as for storing digital information.
- the content server 130 may implement SSL to securely communicate with the other communication endpoint.
- HTTPS may be used to secure this communication.
- the certificates necessary for SSL may be either provided by the content server 130 or by a certificate authority 140 with which the content server 130 may be in communication via the network 160 .
- the mobile access control server 120 , CA 140 , and content server 130 may include a server that includes one or more memories and processors for providing and communicating digital information.
- the network 160 may include any wired or wireless (for example, the Internet) system that allows the communication of digital information via electromagnetic signals among digital devices and/or systems.
- the mobile access control server 120 may control the access by the mobile device 100 to particular data services by providing or not providing a certificate to the mobile device 150 . Contrary to the common SSL procedure, the mobile access control server 120 may prohibit the mobile device 150 from downloading certificates directly from the content server 130 or the certificate authority 140 . Instead, the mobile access control server 120 may allow the mobile device 150 to receive the certificate or certificates only from the mobile access control server 120 via the network 160 .
- the mobile device 150 may make a request to the mobile access control server 120 for access to the data service (an “access request”).
- This request may indicate the particular data service to which access is requested, and/or an identifier of the mobile device 150 making the request.
- the mobile access control server 120 may determine whether the mobile device 150 is allowed to access the requested data service. The mobile access control server 120 may make this determination based on the identifier supplied by the mobile device 150 in an access request.
- the mobile access control server 120 may initiate a subscription process that enables the mobile device 150 to subscribe to the requested data service.
- the mobile access control server 120 may provide information relating to the content server providing the requested data service (the “access information”) to the mobile device 150 .
- the access information may include a certificate, such as an X.509 certificate. Alternately, or in addition, the access information may include a session key that enables the mobile device to decrypt the encrypted data service.
- the mobile access control server 120 may determine whether the access information is stored within the mobile access control server 120 . If the access information is not stored within the mobile access control server 120 , the mobile access control server may request the access information from the content server 130 or a certificate authority 140 .
- the mobile access control server 120 may then receive the access information.
- the mobile access control server 120 may store the access information. Having the mobile access control server 120 obtain and store the access information may provide a faster response to subsequent access requests, and may significantly reduce the signaling between the mobile device 150 and the mobile access control server 120 for subsequent access requests. This may be relevant when the mobile device 150 is in communication with the mobile access control server 120 over an EM link having scarce resources.
- the mobile access control server 120 may then communicate the access information to the mobile device 150 via the network 160 and perhaps through an access provider 110 .
- the mobile access control server 120 may provide a message to the mobile device 150 indicating a location within the mobile access control server 120 from which the access information may be obtained by the mobile device 150 .
- the message mentioned above may be a systems management server (“SMS”) or multimedia message service (“MMS”) message, which may indicate a location within the mobile access control server 120 in the form of a uniform resource locator (“URL”).
- SMS systems management server
- MMS multimedia message service
- URL uniform resource locator
- the mobile device 150 may request the access information in the location indicated in the message.
- the mobile access control server 120 may communicate the access information to the mobile device 150 , which may store the access information for current and/or later use.
- the mobile device 150 may terminate the EM link 112 to the access provider 110 after making the access request. Further, so that the mobile device 150 may obtain the access information from the mobile access control server 120 , the mobile device 150 may include a timer (not shown) that is started during or after the mobile device 150 makes the access request. When the timer expires, the mobile device 150 may reestablish communication with the access provider 110 to request and receive the access information from the mobile access control server 120 . Hence, the timer may be used to trigger establishment or reestablishment of EM link 112 between the mobile device 150 and the access provider 110 . After the access information is received, the mobile device may terminate the EM link 112 .
- the mobile device 150 may use the access information to establish an encrypted connection (or a “session,” for example when made within HTTPS) to the content server 130 or to decrypt encrypted data communicated with the data service via the content server 130 .
- the mobile device 150 may only use secure communication when accessing a data service (such as a data service that provides data delivery according to the SSL de facto standard or HTTPS protocol), if the mobile device 150 has the access information needed to establish a session or connection for communicating encrypted data.
- a data service such as a data service that provides data delivery according to the SSL de facto standard or HTTPS protocol
- the mobile device 150 may only be capable of receiving and decoding the data that is provided with the correct session key.
- the access to data services may be controlled by a mobile access control server 120 by only providing the mobile device 150 with the necessary access information for successfully receiving the requested data service, if the mobile device 150 is granted access to the service by the mobile access control server 120 .
- This access control mechanism is also independent from the point of access of the mobile device to the network.
- the mobile device 150 may determine whether the access information is stored in the mobile device 150 , itself. If the access information is stored in the mobile device 150 , for example as the result of a previous access request, the mobile device 150 may establish an encrypted connection to the content server 130 or decrypt encrypted data provided by the data service via the content server 130 using the stored access information. Because the mobile device 150 determines whether the mobile device 150 itself stores the access information, the mobile device 150 only may only need to make an access request once for a given data service.
- the access information such as a certificate
- the mobile access control server 120 may still control access to the data services because the mobile device 150 may need to submit an access request to the mobile access control server 120 to have access to the data service after the validity period ends.
- the networked system 200 of FIG. 2 may include alone or in any combination: a mobile access control server 220 , one or more mobile devices 250 , systems (which may include methods and/or devices) for providing control of mobile access to a data service. Further, the networked system 200 may include a certificate authority 240 , which provides authentication by creating and issuing certificates. The networked system 200 may also include a content server that may include a digital video broadcast/digital audio broadcast (“DVB/DAB”) provider 230 . The networked system 200 may also include a network 260 that enables the other components of the networked system to be in communication with each other. The descriptions of the components of the networked system 100 discussed in relation to FIG. 1 , may apply to the corresponding components in the networked system 200 shown in FIG. 2 .
- the mobile device 250 may include, alone or in any combination: a processor 203 , navigation system 204 , user interface 205 , input module 206 , broadcast receiver 202 , and memory 207 .
- the mobile device 250 may include a receiver for receiving data, including digital video and/or digital audio broadcasts.
- the receiver may include a DVB/DAB receiver 208 .
- DVB is merely one example of an international digital broadcast standard for television, audio and data.
- DVB may include broadcast via satellite 202 (“DVB-S”), cable (“DVB-C”), terrestrial systems (“DVB-T”), or via DVB-H, for small mobile systems.
- DVB/DAB data may be provided via IP networks.
- DVB may provide digital video, audio and data streams. According to the different DVB standards, one or more streams may be provided by a DVB provider 230 . When broadcasting via DVB-S, DVB-C or DVB-T and antennas, there may be several broadcast channels available. In other words, multiple streams may be provided on different carrier frequencies. Each stream may be identified by an identification that may be referred to as a “stream_ID.”
- Each stream may carry a plurality of different broadcast programs.
- a DVB transport stream (“TS”) uses variable length frames (each a “program elementary stream” or “PES”).
- PES may include a header (a “PES header”) and a payload section.
- the payload section may include data, and the PES header may identify the program to which the data that follows the PES header belongs, and the length of the data.
- the DVB stream may carry multiple multiplexed broadcast programs.
- control streams may be broadcasted.
- a control stream may identify the different programs multiplexed in each DVB TS.
- the control channels may include a program association table (“PAT”), program map table (“PMT”), conditional access table (“CAT”), and network information table (“NIT”).
- PAT program association table
- PMT program map table
- CAT conditional access table
- NIT network information table
- the PAT may indicate the location of the corresponding PMT.
- the PAT may also provide the location of the NIT.
- the PMT may identify and indicate the locations of the streams that make up each service (video, audio or data), and the type of the encryption used on the data.
- the CAT provides information on the CA systems used in the multiplex. This information is private, depends on the CA system, and may include the location of the EMM stream, when applicable.
- the NIT may provide information about the physical network. A comparable implementation of frame structures, streams and lookup tables may be used for DAB.
- the DAB and DVB streams may also be protected from unauthorized access by scrambling.
- An example of a CA system implemented with a scrambling method is described in ETR 289 (Digital Video Broadcasting (“DVB”); Support for use of scrambling and Conditional Access (“CA”) within digital broadcasting systems).
- the scrambling method may operate on the payload of a TS packet when TS-level scrambling is used.
- a structuring of program elementary stream (“PES”) packets may be used to implement PES-level scrambling with the same scrambling algorithm.
- the PES packet header may not be scrambled and TS packets containing parts of a scrambled PES packet may not contain an adaptation field (with the exception of the TS packet containing the end of the PES packet).
- the header of a scrambled PES packet may not span multiple TS packets.
- the TS packet carrying the start of a scrambled PES packet may be filled by the PES header and the first part of the PES packet payload.
- the first part of the PES packet payload may be scrambled in the same manner as a TS packet with a similar sized payload.
- the remaining part of the PES packet payload may be split in super-blocks of 184 bytes.
- the super-blocks may be scrambled as a TS packet payload of 184 bytes.
- the end of the PES packet payload may be aligned with the end of the TS packet by inserting an adaptation field (an “AF”) of suitable size. If the length of the PES packet is not a multiple of 184 bytes, the last part of the PES packet payload (from 1 to 183 bytes) may be scrambled in the same manner as a TS packet with a similar sized payload.
- an adaptation field an “AF”
- the PES level scrambling method may put some constraints on the multiplexing process to make the de-scrambling process easier. This may create some bit-rate overhead if AFs are needed in TS packets carrying scrambled PES packets. When this is the case, a TS packet containing only an AF may be inserted.
- the scrambling of sections may be at the TS level and may be signaled by the scrambling control field bits. Clear and scrambled sections may not be combined in a single TS packet.
- the MPEG-2 defined padding mechanism may be used to create TS packets with only clear or only scrambled sections. The end of a TS packet carrying a Section may be filled with bytes having a value of 0xFF, in order to separate clear and scrambled sections into different TS packets.
- the algorithm described above is designed to minimize the amount of memory in the de-scrambler circuit at the expense of the complexity in the scrambler.
- the exact amount of memory and the de-scrambling delay depend on actual implementations.
- the payload data may be encrypted by a symmetrical session key, which may be distributed to subscribers of the respective DVB program. Therefore, by controlling the distribution of a valid session key, the access to a DVB/DAB programs may be controlled.
- the mobile access control server 220 may distribute the session key for a DVB channel to the mobile device 250 upon receiving an access request from the mobile device 250 and determining whether the mobile device 250 is allowed to receive the requested channel (data service).
- the session key may be valid for a certain time period only, such that also timely limited subscriptions may be possible.
- Information about the validity period of a session key may be also communicated from the mobile access control server 220 to the mobile device 250 along with the session key.
- FIG. 3 A method for controlling mobile access to a data service is shown in FIG. 3 .
- Other methods may be used, such as the method described in connection with FIG. 4 .
- the method 300 shown in FIG. 3 may be implemented with a mobile device and a mobile access control server, such as those shown in FIG. 1 (reference numbers 150 and 120 , respectively) and FIG. 2 (reference numbers 250 and 220 , respectively). Therefore, the method 300 may be implemented to allow secured data delivery from a data server through network.
- DVB channels may be delivered via the Internet and an access network to the mobile device.
- the mobile device may determine whether it has received a request for a data service from the user 301 .
- the request may come from other external sources or from the mobile device itself, and generally identifies the requested data service.
- the request may include the URL of a data service that is located on an HTTPS.
- the mobile device may determine whether the one or more certificates required to access the requested data service is available from the mobile device itself 302 . This may involve determining whether the mobile device or any other device or system with which the mobile device is in communication is storing the required certificate(s). For example, the mobile device may have stored the required certificate(s) in its memory. If the mobile device determines that the required certificate is available from the mobile device itself, determining whether the required certificate is available from the mobile device 302 may also include the mobile device determining whether the certificate is still valid or whether the certificate has expired. If the required certificate is available from the mobile device, this, may be due to a previous access request made by the mobile device to the requested data service.
- the mobile device may establish a connection with the content server on which the requested data service is stored 303 .
- the mobile device may establish an SSL connection to the selected HTTPS content server 303 according to the SSL protocol.
- the mobile device may send an access request for the required certificate to an access control server, content server, or CA.
- the access request may identify the required certificate, requested data service, or the content server on which the requested data service resides.
- the access may include the HTTPS-URL of the content server on which the desired data service resides.
- the access request may include an identifier ID which uniquely identifies the mobile device. This information may be used by the mobile access control server to determine whether the requesting mobile device is allowed to receive the requested data service offered from the content server corresponding to the HTTPS-URL indicated in the access request. In addition, this information may also be used to send a requested certificate(s) and/or an error message back to the mobile device.
- the identification may be, for example a unique identification identifying the mobile device, user, or a vehicle or in which the mobile device may be used.
- the mobile device may await a response from the mobile access control server 305 .
- the mobile device may wait indefinitely or until a predetermined amount of time has expired for a response from mobile access control server. If the mobile device waits indefinitely, it will wait until a response from the mobile control access device is received. If, however, the mobile device waits for only a fixed amount of time, when the mobile device determines that the fixed time period has expired (timedout), the mobile device may communicate an error message to the user.
- the mobile device may communicate an error message with an output module. For example, the error message may inform the user that the mobile access control server did not respond to the access request, or denied access to the desired data service.
- the mobile device may determine whether the response from the mobile access control server includes the required certificate(s) 307 . If the response from the mobile access control server does not include the required certificate(s), the mobile device may communicate an appropriate error message to the user 306 . If, however, the response from the mobile access control server does include the required certificate(s), the mobile device may store the required certificate(s) 308 .
- the mobile device may restart the browser 309 before proceeding, because some browsers require that all certificates be available before the start of the browser. Restarting the browser 309 is optional and may be executed if required by the application used to provide the requested data service to the user.
- the mobile device may retrigger the user request for the data service 310 .
- the data service may be requested again and the process repeats.
- the mobile device determines again whether all certificate(s) for setting up the SSL connections are available 302 . However, the required certificate(s) may be available to the mobile device, and a connection may be established, such as an SSL connection, with the content server 303 on which the requested data service is stored.
- the mobile access control server waits for an access request from a mobile device 311 .
- the mobile access control server may determine whether the mobile device making the access request requesting is allowed to access the requested data service 312 .
- the mobile access control server may make this determination by identifying the mobile device and the requested service by the identifications included in the access request.
- the mobile access control server may then determine whether an access profile corresponding to the mobile device grants access to the requested data service.
- the mobile access control server may send a reply to the mobile device, which may include an error message indicating that access was denied.
- the mobile access control server may initiate a registration or subscription procedure with the mobile device, allowing the user to subscribe for the requested data service (not shown).
- the mobile access control server may determine whether the required certificate(s) are available from the mobile access control server itself 313 . In other words, the mobile access control server may determine whether it already stored the required certificate(s). If the mobile access control server determines that the required certificate(s) are available locally, the mobile access control server may communicate the certificate(s) to the requesting mobile device 316 . If, however, the mobile access control server determines that the certificate(s) are not available locally, the mobile access control server may request the certificate(s) from the content server storing the requested data service, or a certificate authority 314 .
- the mobile access control server may store the certificate(s) 315 and may forward them to the mobile device 316 . This procedure allows the mobile access control server to control the mobile device's access to data services by controlling the distribution of the certificates required to access the data services.
- the mobile access control server may only communicate to the mobile device whether the mobile device has permission to access the requested data service and not the required certificate.
- the mobile device may have available to it a required and unexpired certificate, but the user of the mobile device has unsubscribed from or let the subscription lapse for the corresponding data service.
- the mobile device may only request from the mobile access control server information regarding whether the user or mobile device is still allowed to use the requested data service. In response, the mobile access control server may communicate this information without communicating the required certificate.
- FIG. 4 Another method for controlling mobile access to a data service is shown in FIG. 4 .
- This method 400 may be implemented by a mobile device and a mobile access control server, such as those shown in FIG. 2 (reference numbers 250 and 220 , respectively), when the mobile device makes an access request for an encrypted DVB channel (or data service).
- the mobile device may determine whether it has received a request for a data service from the user 401 .
- the request may come from other external sources or from the mobile device itself, and generally identifies the requested data service.
- the mobile device determines whether it has received a request for a DVB/DAB program 401 . If the mobile device determines that a request for a DVB/DAB program has been received, the mobile device may determine whether the session key required to decrypt the requested DVB/DAB program is available from the mobile device, and whether the session key has expired (whether the session key is still valid). For example, the required session key may be stored in the memory of the mobile device itself.
- the mobile device may receive and decrypt the DVB/DAB program 403 .
- the program is a DVB-S program
- the broadcast receiver (see FIG. 2 , reference number 202 ) of the mobile device may be tuned to the requested channel and may start receiving the data from a satellite.
- the mobile device may have previously communicated an access request for the requested data service or DVB/DAB program and obtained the required session key from the mobile access control server.
- the mobile device may submit an access request for the required session key from the mobile access control server 404 .
- the mobile device may be not allowed to obtain the required session key directly from the content provider (in this case a DVB/DAB provider) that supplies the requested data service (in this case, the DVB/DAB program).
- the access request may identify the requested data service or DVB/DAB program.
- the access request may include the channel code for the requested DVB/DAB.
- the access request may include an identifier that allows the mobile access control server to uniquely identify the mobile device.
- the mobile access control device may use the identifier to determine whether the requesting mobile device is allowed to receive the requested DVB/DAB program from the DVB/DAB provider.
- the mobile access control server may also use the identifier to send the requested session key and/or an error message back to the mobile device.
- the mobile device may await a response from the mobile access control server 405 for a predetermined or indefinite time interval. Upon expiry of a predetermined time interval (in other words, the request times out), the mobile device may interrupt the access request output an appropriate error message 406 using the user interface of the mobile device, for example, a display, speakers or both.
- the error message may communicate to the user that the mobile access control server did not respond or that the mobile access control server denied access to the DVB/DAB program.
- the mobile device Upon receiving a response from the mobile access control server, the mobile device determines whether the response from the mobile access control server includes the required session key 407 . If the response from the mobile access control server does not include the required session key, and receives, for example, an access denied message, an appropriate error message may be communicated to the user 406 . If, however, the mobile device determines that the response from the mobile access control server includes the required session key, the mobile device may store the session key within the mobile device itself 408 .
- the mobile device may then retrigger the request for the DVB/DAB program 409 .
- the method 400 may repeat from step from step 402 , during which the mobile device again determines whether the required session key is available from the mobile device.
- the required session key may be stored at the mobile device, having been stored during the previous iteration of the method 400 , and the requested DVB/DAB program can may be received, successfully decrypted and communicated to the user 403 .
- the mobile access control server determines whether it has received an access request from the mobile device 411 .
- the mobile access control server may determine whether the mobile device making the access request is allowed to receive or use the requested DVB/DAB program or data service 412 .
- the mobile access control server may examine an access profile that corresponds with the mobile device identified in the access request and determine whether the access profile grants access to the requested data service.
- the mobile access control server may communicate an access denied message to the mobile device 412 .
- the mobile access control server may initiate a registration or subscription procedure with the mobile device that allows the user to subscribe to the requested DVB/DAB program or data service.
- the mobile access control server may determine whether the required session key is available locally and if the required session key is valid 413 . In other words, the mobile access control server may determine whether the session key is already stored in the mobile access control server itself. If the mobile access control device determines that the session key is already stored in the mobile access control server, and perhaps is valid, the mobile access control server may communicate the session key to the requesting mobile device 416 . If the required session key is not available locally, the mobile access control server may request the required session key from the DVB/DAB provider 414 .
- the mobile access control server may store the required session key 415 and may forward the required session key to the mobile device 416 .
- This method 400 allows the mobile access control server to control the access of the mobile devices to DVB/DAB programs by controlling the distribution of the required session keys.
- the mobile access control server may only communicate to the mobile device whether the mobile device has permission to access the requested data service and not the session key required to do so.
- the mobile device may have available to it a required and unexpired session key, but the user of the mobile device has unsubscribed from or let the subscription lapse for the corresponding data service, such as a DVB/DVA program.
- the mobile device may only request from the mobile access control server information regarding whether the user or mobile device is still allowed to use the requested data service. In response, the mobile access control server may communicate this information without communicating the required session key.
- the mobile access control server may track the valid session keys provided to a mobile device. Upon lapse of or unsubscription from a data service, the mobile access control server may cause the mobile device to delete the session key for the lapsed or unsubscribed data service.
- FIGS. 5 through 8 illustrate exemplary message flow diagrams illustrating the message flow between the different components of the networked system 100 shown in FIG. 1 .
- An example of a message flow that may result when a mobile device makes an access request for a data service from the mobile access control server is shown in FIG. 5 .
- the mobile access control module has stored the requested certificate locally.
- the user through a user interface of the mobile device (see FIG. 1 , reference number 105 ) may communicate a request for an HTTPS-URL to the mobile device 501 .
- the mobile device may determine whether the certificate required for the requested data service are locally available 502 .
- the certificate is not available, and therefore the mobile device may send an access request for the certificate to the mobile access control server 503 .
- the mobile access control server may determine whether the requesting mobile device is allowed to access the requested data service, and if the requesting mobile device is allowed to access the requested data service, whether the required certificate is locally stored 504 .
- the certificate is stored in the mobile access control server, and therefore, may be communicated by the mobile access control server to the mobile device in a reply message 505 .
- the mobile device may then store the required certificate 506 , and may optionally initiate a restart of the browser application used for providing the data service to the user 507 .
- the mobile device may communicate a command to the user interface of the mobile device to restart the browser application.
- the user interface may then restart the browser 508 , and may retrigger the request for the data service 509 .
- the mobile device may again determine whether the required certificate available locally 510 . In this instance, the certificate is available for the mobile device locally because the mobile device received and stored the certificate in the prior iteration.
- the mobile device may then initiate the setup of a secure SSL connection to the content provider of the data service 511 .
- the mobile device may communicate messages to the user interface, which are communicated to the user to inform the user about the status of the user's request. For example, when the mobile device makes an access request for a certificate to access a data service 503 , a corresponding message may be output to the user. In another example, when the mobile device receives the required certificate from the mobile access control server, the user interface may communicate this event to the user. In addition, error messages may be communicated as described in connection with FIG. 2 and FIG. 3 .
- the message flow may be similar to that shown in FIG. 5 .
- the user may communicate the requested DVB/DAB program to the mobile device by tuning the mobile device to the requested encrypted DVB channel.
- the mobile device may then perform the actions as described in connection with FIG. 3 . Because a link between an access network of an access provider and the mobile device may not be required for the mobile device to receive the DVB/DAB program, the mobile device, using its EM module (see reference number 201 in FIG. 2 ), may not have established an EM link with the network (see reference number 260 in FIG. 2 ).
- mobile device may request permission from the user before establishing a link to the mobile access control server to download a required session key if the required session key is not stored locally.
- the mobile device may request a session key for the DVB/DAB program.
- the mobile device may store the session key upon reception of the session key from the mobile access control server.
- FIG. 6 Another example of a message flow that may result when a mobile device makes an access request for a data service from the mobile access control server is shown in FIG. 6 .
- the requested certificate is not available at the mobile access control server, which then requests the certificate from the content server providing the requested data service.
- the mobile device upon receiving a request for a data service from the user via the user interface 501 , the mobile device determines whether the certificate required to access the requested data service is available from the mobile device 502 . The mobile device may determine that the required certificate is not available from the mobile device, and therefore makes an access request for the required certificate to the mobile access control server 503 .
- the mobile access control server may send a certificate request message to the content server providing the requested service 601 .
- the mobile access control server may, for example, send a message according to the SSL protocol.
- the content server may send the required certificate to the mobile access control server 602 .
- the mobile access control server may store the certificate 505 .
- the remaining messages 505 , 506 , 507 , 508 , 509 , 510 , and 511 correspond, to the messages in FIG. 5 with the same respective reference numbers.
- FIG. 7 Another message flow that may result when a mobile device makes an access request for a data service from the mobile access control server is shown in FIG. 7 .
- Messages 501 , 502 , 503 , 504 , 505 , 506 , 507 , 508 , 509 , 510 and 511 correspond to the respective identical messages in FIG. 5 .
- messages 601 and 603 correspond to the respective identical messages in FIG. 6 .
- Some of the message flow shown in FIG. 7 corresponds to the message flow shown in FIG. 6 , except as set forth in the following description.
- the content server may redirect the mobile access control server to a certificate authority to obtain the required certificate from 701 . Therefore, upon receiving a request for the content server's certificate from the mobile access control server, the content server may reply with a message indicating the certificate authority from which the mobile access control server may obtain the required certificate 701 .
- the mobile access control server may send a certificate request message to the certificate authority indicated by the content server 702 .
- the request message indicates the data service or content server for which the certificate is requested.
- the certificate authority may communicate a reply message that includes requested certificate 703 .
- the mobile access control server may store the certificate 603 and forward the certificate to the mobile device 505 .
- the remaining messages correspond to those shown in FIG. 6 .
- FIG. 8 Another message flow that may result when a mobile device makes an access request for a data service from the mobile access control server is shown in FIG. 8 .
- access to data services and DVB/DAB programs is controlled by the mobile access control server, which controls the provision of certificates or session keys to the mobile device.
- this message flow differs from those previously discussed in that the mobile device is permitted to contact the content server or the DVB/DAB provider directly.
- Messages 501 , 502 , 506 , 507 , 508 , 509 , 510 , and 511 respectively correspond to those of FIG. 5 .
- the mobile device may request the certificate directly from the content server that provides the requested data service 801 .
- the request communicated by the mobile device may include an identification uniquely identifying the requesting mobile device.
- the content server may then communicate to the mobile access control server a message that may include the identification of the requesting mobile device and the requested data service 802 .
- This “access grant” message may be used by the content server whether the requesting mobile device is allowed to receive the requested data service or not.
- the access control server may extract the identification of the mobile device and the requested service from the access grant message. Using this information, the mobile access control server may determine whether the requesting mobile device is allowed to access the requested data service. The mobile access control server may then send an access grant reply back to the content server indicating whether the mobile device is allowed to access the requested data service 803 .
- the content server may communicate a message to the mobile device indicating that the mobile device is denied access to the requested data service. Further, the content server may not provide its certificate to the mobile device, and the mobile device may not establish a SSL connection with the content server for the requested data service. If, however, the access grant reply indicates to the to the content server that the mobile device is allowed to access the requested data service, the content server may communicate a message to the mobile device indicating that the mobile device is granted access to the requested data service 804 . Upon receiving the content server's certificate, the mobile device may store the certificate 506 . The other messages exchanged between user interface and mobile device 507 , 508 , 509 , 510 and 511 correspond to those of FIG. 5 .
- FIG. 9 Another message flow that may result when a mobile device makes an access request for a data service from the mobile access control server is shown in FIG. 9 .
- a session key for an encrypted DVB/DAB program may be obtained in a manner similar to that shown in FIG. 8 .
- the mobile device may request the user's permission to establish an EM link with an access network of an access provider before the mobile device requests the session key for the requested encrypted DVB/DAB program from the DVB/DAB provider.
- the DVB/DAB provider may request permission from the mobile access control server to provide the necessary session key to the mobile device.
- FIG. 9 shows a message flow between the different components of a networked system, such as that shown in FIG. 2 .
- a user using the user interface of the mobile device or the mobile device itself may request a DVB/DAB program 901 .
- the mobile device may determine whether the session key required to decrypt the requested DVB/DAB program (the “prog_ID”) is available from the mobile device 902 . Further, if the session key is available locally, the mobile device may determine whether the session key has expired.
- the session key required to decrypt the requested DVB/DAB program
- the mobile device may directly receive the DVB/DAB program, and decrypt its data (not shown in FIG. 9 ). If, however, the required session key is not available from the mobile device or has expired, the mobile device may communicate an access request for the required session key to the mobile access control server 903 , which indicates the requested program (for example, includes the prog_ID). Further, the access request may include an identifier (“ID”) that uniquely identifies the mobile device.
- ID an identifier
- the mobile access control server may determine whether the required session key is locally available 904 . If the mobile access control server determines that the required session key is locally available, the mobile access control server may communicate a reply message, which may include the session key, to the mobile device 908 . However, if the mobile access control server determines that the session key is not locally available, the mobile access control server may communicate a message to the DVB/DAB provider requesting the required session key 905 . Upon reception of this message, the DVB/DAB provider may provide the requested session key, which may be identified by a DVB/DAB program identifier included in the request message, to the content server in a reply message 906 .
- the mobile access control server may store the session key 909 and may forward the session key to the mobile device 908 .
- the mobile device may store the session key 909 and may restart the user interface as previously explained in connection with FIG. 5 .
- the mobile device may receive the DVB/DAB program and decrypt the program's data stream using the session key 910 .
- FIG. 10 shows a message flow between the different components of a networked system, such as that shown in FIG. 2 .
- the session key is provided differently than in the example discussed in connection with FIG. 9 .
- the mobile device may not consistently maintain a connection with the mobile access control server during while obtaining the session key.
- the mobile device may establish a communication link with an access network of an access provider before communicating an access request for the session key 903 .
- the mobile device may disconnect the communication link with the access network 1002 . This may avoid extra costs imposed by access providers that charge for access on a time-basis.
- the mobile access control server may communicate a separate message to the mobile device through the access network in which information identifying a location within the mobile access control server at which the requested session key may be found. For this purpose, the mobile access control server may communicate an SMS, or MMS message comprising the URL to the mobile device.
- the mobile device may again establish a communication link with the access network 1005 , and may request the session key from the URL provided by the mobile access control server 1006 .
- the mobile access control server may provide the session key to the mobile device 1007 .
- the mobile device may close the communication link with the access network 1008 .
- the remaining steps correspond to those described with reference to FIGS. 5 and 9 , respectively.
- FIG. 10 shows a message flow between the different components of a networked system, such as that shown in FIG. 2 .
- the mobile device includes a timer, which may be used to trigger the establishment of a communication channel with the mobile access control server 1102 .
- the mobile access control server pushing a message to the mobile device to inform the mobile device of the availability of access information for the requested DVB/DAB program.
- the mobile device may (re)transmit an access request for the session key to the mobile access control server 1103 .
- the access control server may determine whether the session key associated with the DVB/DAB program identifier (prog_ID) provided in the access request is available at the mobile access control server 1104 .
- the timer period T may be chosen to increase the probability that a session key was previously requested 905 , obtained from a third source, such as the DVB/DAB provider 906 , and stored 907 by the mobile access control server prior to the (re)transmission of the access request 1103 .
- the mobile access control server should have the required session key available when the mobile access control server receives the access request 1103 . Nevertheless, the mobile access control server may verify the availability of the session key 1104 and may forward the session key, if locally stored, to the mobile device in a reply message 1105 .
- the mobile access control server determines that the session key is not stored at the mobile access control server itself, this determination may be communicated with the mobile device.
- the mobile device may restart the timer T, and may communicate an access request for the session key after the timer T has expired. If the timer is restarted a predetermined number of times, and the session key cannot be obtained from the mobile access control server, the mobile device may assume that the session key is not available, or could not be obtained by the mobile access control server, and may communicate this information in an error message to the user.
- the mobile access control server may communicate a reason for the failure to obtain a session key. The mobile device may then communicate this information to the user.
- the mobile device may obtain certificates from the mobile access control server in a manner similar to using a message to inform the mobile device of the availability of access information on the mobile access control server.
- a timer may be employed in a similar manner to (re)establish a communication link between the mobile device and the mobile access control server, and to obtain access information in form of certificates from an identified location in the mobile access control server.
- a manner similar to that described in connection with FIG. 8 may be implemented to obtain a session key from the content provider, such as a DVB/DAB provider.
Abstract
A networked system for controlling the mobile access to a data service, which may provide encrypted data, is presented. The system may include a mobile device and a mobile access control server, which controls the mobile device's access to the data service by controlling the access information required to access the data service. The system may also include a content server that provides the data service, a certification authority, and a network for enabling communication among the components of the system. To access encrypted data services, the mobile device communicates an access request to the mobile access control server, which determines whether access should be granted, and provides access information to the mobile device, enabling the mobile device to establish encrypted communication with the content server and/or to decrypt the encrypted data provided by the data service via the content server.
Description
- This application is a continuation of and claims priority to U.S. patent application Ser. No. 10/984,731, filed on Nov. 8, 2004, titled SECURE NETWORKED SYSTEM FOR CONTROLLING MOBILE ACCESS TO ENCRYPTED DATA SERVICES; that claims priority to European Application No. 03 025 679.6 filed Nov. 7, 2003, both applications of which are incorporated by reference in this application in their entirety.
- 1. Technical Field
- The present invention relates to providing secure access to data services for mobile devices.
- 2. Related Art
- The Internet is an open system in which the identity of communicating users is not easy to determine and authenticate. Further, the communication channel is non-physical and therefore is vulnerable to eavesdropping and active interference. Thus, communicating over the Internet is much like communicating with anonymous postcards, which are open for anyone to read, or even alter.
- The Internet may be used to carry messages between specific endpoints in a relatively secure and private way by using encryption. However, problems may still arise, for example, from a “man-in-the-middle” attack made to gain knowledge over data, or to gain access to data and resources. It is important to note that these problems do not disappear with encryption or even use of a secure protocol. If a user is led to connect with a site that only appears to be the desired site (a “spoofing site”), a secure connection made with this site will provide no protection. Thus, identity certification, or authentication, is needed to assure that communication is between the desired users.
- The ITU-T Recommendation X.509 (the “X.509 standard”), which has been implemented as a de facto standard, defines a framework for providing authentication services under a central control paradigm represented by a directory. The X.509 standard describes two levels of authentication. The first, referred to as “simple authentication,” uses a password to verify claimed identity. The second, referred to as “strong authentication,” involves credentials that are formed using cryptographic techniques (a “certificate”).
- A certificate, also known as a user certificate or public key certificate, includes the public keys of a user, and other information, which are rendered unforgeable by encipherment with the private key issued by a certification authority (“CA”). The certificate allows an association between a name for the user (a “unique distinguished name” or “DN”), and the user's public-key. The DN is denoted by a naming authority (“NA”) and accepted by a CA as unique within the CA's domain. The CA and the NA may be the same entity. The same user may have different DNs in different CAs. Alternately, the user may have the same DN in different CAs, even if a different user has already used the same DN in a CA. Therefore, different DNs in different CAs do not necessarily correspond to different users and vice-versa. Further, a DN does not have to contain the user's actual name or location. Thus, semantically, the CA certificate refers to a name; however, the certificate does not denote the name.
- The X.509 standard focuses on defining a mechanism by which information can be made available to a user in a secure way. However, the X.509 standard is not meant to address the level of effort required to validate the information in a certificate, or define a global meaning to that information outside the CA's management acts. The main purpose of a CA is to bind a public key to the name contained in the certificate, and thus assure users that some measure of care was taken to ensure that this binding is valid for both the name and key. However, whether a user's DN actually corresponds to identity credentials that are linked to a person or to an e-mail address, and how such a link is verified is outside the scope of the X.509 standard. The resolution of these issues depends on each CA's self-defined rules, called CPS.
- The Secure Sockets Layer (“SSL”) and hypertext transfer protocol over secure socket layer (“HTTP over SSL” or “HTTPS”) are protocols that support the use of digital certificates issued from a server under the X.509 standard (“X.509 certificates”). If necessary, a user can use the certificate to authenticate a sender. SSL is commonly-used for managing the security of message transmission over the Internet (see Freier et al, “The SSL protocol version 3.0,” Internet Draft, Nov. 18, 1996, available at http://www.ietf.org). SSL may provide a framework for defining an authentication procedure for users (the communication endpoints), and procedures for establishing encrypted communication between users. SSL uses a program layer located between the Internet's Hypertext Transfer Protocol (“HTTP”) and Transport Control Protocol (“TCP”) layers.
- SSL is included as part of both the MICROSOFT® and NETSCAPE® browsers and most Web server products. Developed by NETSCAPE®, SSL also gained the support of MICROSOFT® and other Internet client/server developers and became the de facto standard until evolving into Transport Layer Security (“TLS”), which is based on SSL. The “sockets” in Secure Socket Layer refers to the sockets method of passing data back and forth between a client and a server program in a network, or between program layers in the same computer. SSL uses the public-and-private key encryption system by RSA (Rivest, Shamir and Adleman), which also uses digital certificates. TLS and SSL are an integral part of most Web browsers (“clients”) and Web servers. If a Web site is on a server that supports SSL and SSL is enabled, specific Web pages may be identified as requiring SSL access. Any Web server may be enabled by using NETSCAPE®'s SSLRef program library, which may be downloaded for commercial or noncommercial use.
- HTTPS is a Web protocol developed by NETSCAPE® and built into the NETSCAPE® Web browser, which encrypts and decrypts user page requests and the Web pages that are returned by the Web server. HTTPS uses NETSCAPE®'s SSL as a sublayer under NETSCAPE®'s regular HTTP application layering, in which HTTPS may use port 443 instead of HTTP port 80 in its interactions with the lower layer, TCP/IP. SSL may use a 40-bit key size for the RC4 stream encryption algorithm, which may be considered an adequate degree of encryption for commercial communications.
- Due to increasing available bandwidth for wireless communication, mobile users may gain access to the Internet and other data services with mobile devices. These mobile devices may integrate devices that provide various functions. For example, a mobile device for use in a vehicle may include a receiver for providing entertainment and a navigation system for providing trip planning. However, in using mobile devices to wirelessly access data services, security has become an issue. Protocols, such as the wireless application protocol (“WAP”), enable the users of mobile devices (such as devices that include integrated receivers) to gain access to Internet content. Access is gained, however, in a rather functionally reduced manner as compared to the access enabled by browsers on desktop computers. The browsers on desktop computers may use HTTP, Macromedia Flash, Java, JScript, and the like, for animating web page content and enabling enhanced navigation on web pages.
- As more sophisticated access methods and broadband access via wireless links become standard, users demand more sophisticated products and applications that provide access to data or broadcast services while the users are moving in a manner similar to that provided by stationary desktop computers. Therefore, employing, for example, the X.509 standard and SSL in mobile devices to secure communications and data may be desirable. In addition, controlling access to particular data or broadcast services by mobile devices may also be desirable. In addition, because mobile devices may frequently change their location, and perhaps the access point through which they access the services, access control that is independent of the location of such mobile devices or the access point through which such mobile devices access the services may be desired.
- This document describes a server for controlling mobile access (a “mobile access control server”), a mobile device, and a secure networked system that may include, alone or in any combination, methods, systems and/or devices for providing control of mobile access to a data service. The data service may include any type of service providing data in a wireless manner. For example, the data service may be a broadcast service, such as digital radio or video. The networked system may include a mobile access control server, and may also include one or more mobile devices, and a content server. The content server may provide the data service using data in encrypted form. In general, the mobile device, which may be portable or fixed within a mobile body, such as a vehicle, may provide access to the data service. For example, the mobile device may include a browser application that provides such access. In addition, the mobile device may provide functions such as entertainment and information processing. The networked system may also include a network that enables the other components of the networked system to be in communication with each other.
- In use, the mobile device may make a request to the mobile access control server for access to the data service (an “access request”). This request may indicate the particular data service to which access is requested, and/or an identifier of the mobile device making the request. Upon receiving the access request, the mobile access control server may determine whether the mobile device is allowed to access the requested data service. The mobile access control server may make this determination based on the identifier supplied by the mobile device in an access request.
- If the access control service determines that the mobile device is not allowed to access the data server, the mobile access control server may initiate a subscription process that enables the mobile device to subscribe to the requested data service.
- If, however the mobile access control server determines that the mobile device is allowed to access the requested data service, the mobile access control server may provide information relating to the content server providing the requested data service (the “access information”) to the mobile device. The access information may include a certificate, such as an X.509 certificate. Alternately, or in addition, the access information may include a session key that enables the mobile device to decrypt the encrypted data service. Before providing the access information to the mobile device, the mobile access control server may determine whether the access information is stored within the mobile access control server. If the access information is not stored within the mobile access control server, the mobile access control server may request the access information from the content server or a certificate authority. The mobile access control server may then receive and store the access information.
- The mobile access control server may then communicate the access information to the mobile device via the network and perhaps through an access provider. Alternately, the mobile access control server may provide a message to the mobile device indicating a location within the mobile access control server from which the access information may be obtained by the mobile device. Upon receiving such a message, the mobile device may request the access information in the location indicated in the message. In turn, the mobile access control server may communicate the access information to the mobile device, which may store the access information for current and/or later use.
- The mobile device may use the access information to establish an encrypted connection (or a “session,” for example when made within HTTPS) to the content server or to decrypt encrypted data communicated with the data service via the content server. Further, when trying to receive an encoded data service, such as an audio or video broadcast service, from a content server, the mobile device may only be capable of receiving and decoding the data that is provided with the correct session key. Hence, the access to data services may be controlled by a mobile access control server by only providing the mobile device with the necessary access information for successfully receiving the requested data service, if the mobile device is granted access to the service by the mobile access control server. This access control mechanism is also independent from the point of access of the mobile device to the network.
- Prior to making an access request to the mobile access control server, the mobile device may determine whether the access information is stored in the mobile device itself. If the access information is stored in the mobile device, for example as the result of a previous access request, the mobile device may establish an encrypted connection to the content server or decrypt encrypted data provided by the data service via the content server using the stored access information.
- Other systems, methods, features and advantages of the invention will be, or will become, apparent to one with skill in the art upon examination of the following figures and detailed description. It is intended that all such additional systems, methods, features and advantages be included within this description, be within the scope of the invention, and be protected by the following claims.
- The invention can be better understood with reference to the following drawings and description. The components in the figures are not necessarily to scale, emphasis instead being placed upon illustrating the principles of the invention.
-
FIG. 1 is a diagram of a networked system for controlling access to a data service. -
FIG. 2 is a diagram of another networked system for controlling access to a data service. -
FIG. 3 is a flow chart of a method for controlling mobile access to a data source. -
FIG. 4 is a flow chart of another method for controlling mobile access a data source. -
FIG. 5 is a diagram of message flows among the components of the networked system shown inFIG. 1 during a situation in which the mobile device has stored a requested certificate locally. -
FIG. 6 is a diagram of message flows among the components of the networked system shown inFIG. 1 during a situation in which a mobile access control server requests a certificate from a content server. -
FIG. 7 is a diagram of message flows among the components of the networked system shown inFIG. 1 during a situation in which a content server redirects a mobile access control server to a certificate authority to requests a certificate. -
FIG. 8 is a diagram of message flows among the components of the networked system shown inFIG. 1 during a situation in which a mobile device may contact a content server directly. -
FIG. 9 is a diagram of message flows among the components of the networked system shown inFIG. 2 during a situation in which a mobile device requests permission from a user to establish an EM link with an access provider. -
FIG. 10 is a diagram of message flows among the components of the networked system shown inFIG. 2 during a situation in which a mobile device may not maintain constant communication with a mobile access control server. -
FIG. 11 is a diagram of message flows among the components of the networked system shown inFIG. 2 during a situation in which a mobile device establishes communication with a mobile access control server upon expiration of a timer. - An example of a secure
networked system 100 for controlling access to a data service (a “networked system”) is shown inFIG. 1 . The networked system is shown for explanatory purposes, and other networked system may be used. Thenetworked system 100 may include, alone or in any combination: a server for controlling mobile access (a “mobile access control server”) 120, one or moremobile devices 150, and systems (including devices and methods) for providing control of mobile access to a data service. Thenetworked system 100 may also include acontent server 130 through which one or more data services may be provided using data in encrypted form. A data service may include any type of service providing data in a wireless manner. For example, the data service may be a broadcast service, such as digital radio or video. Further, thenetworked system 100 may include a certificate authority (“CA”) 140, which provides authentication by creating and issuing certificates. Thenetworked system 100 may also include anetwork 160 that enables other components of the networked system to be in communication with each other. - In general, the
mobile device 150, which may be portable or fixed within a mobile body, such as a vehicle (which may include automobiles, trucks and lorries, farming equipment, mining equipment, golf carts and mobile robots), may provide access to the data service. For example, the mobile device may include a browser application that provides such access. In addition, the mobile device may provide functions such as entertainment and information processing. Themobile device 150 may include an electromagnetic (“EM”)module 101. TheEM module 101 may be capable of receiving and transmitting data using electromagnetic signals according to various wireless standards, such as the universal mobile telecommunications system (“UMTS”), global system for mobile communication (“GSM”), Bluetooth, and wide local area networks (“W-LAN”). Hence, theEM module 101 may be used, for example, as a mobile telephone or as a device providing a wireless uplink (mobile device to an access network) and a wireless downlink (access network to mobile device) to access other networks via the access network of aradio access provider 110. Further, themobile device 150 may include abroadcast receiver 102 that may be used to receive broadcasted electromagnetic signals, such as AM, FM or digital audio broadcasting (“DAB”) signals, and/or digitally encoded data signals, such as radio data systems (“RDS”) signals that may be sent along with other EM signals. - The
mobile device 150 may further include aprocessor 103. Theprocessor 103 may control the different components of themobile device 150, manage and process information such as device-internal data or RDS information, process and respond to user input, and perform other functions. Theprocessor 103 may be any type of device or devices used to process digital information. Themobile device 150 may also include anavigation system 104, or be in communication with an external navigation system. In either case, theprocessor 103 may be in communication and exchange data with thenavigation system 104. - In order to interact with a user and to provide requested services and radio broadcast programs and information to a user, which may include the occupants of a vehicle, the
mobile device 150 may include auser interface 105. Theuser interface 105 may be any type of visual, manual, audio, electronic or electromagnetic device capable of communicating information from a processor or memory to a user or other processor or memory. Theuser interface 105 may also communicate information with the processor or memory. Theuser interface 105 may include output devices. Examples of output devices include, but are not limited to, monitors, speakers, liquid crystal displays, networks, buses, and interfaces. - The
mobile device 150 may enable user interaction with thenetworked system 100 by allowing a user to input data, such as, radio broadcast program selections, navigation destinations, and data for establishing phone calls and displaying traffic information. Themobile device 150 may include aninput module 106, which may be any type of visual, manual, mechanical, audio, electronic, or electromagnetic device capable of communicating information from a person, or memory to a processor or memory. Examples of input devices include keyboards, microphones, voice recognition systems, trackballs, mice, networks, buses, and interfaces. Alternatively, theuser interface 105 andinput module 106 may be included in a single device such as a touch screen, computer, processor or memory. - Moreover, the
mobile device 150 may also include amemory 107. Thememory 107 may be any type of fixed or removable digital storage device and, may include a device for reading the digital storage device including, floppy disks and floppy drives, CD-ROM disks and drives, optical disks and drives, hard-drives, RAM, ROM and other such devices for storing digital information. Thememory 107 may store user information, parameters as well as the programs and applications executed by theprocessor 103. - The
mobile device 150 may access thenetwork 160 through anaccess provider 110 that is in communication with thenetwork 160. In some cases, the access provider may charge a time-based fee for access to the network. Themobile device 150 may be in communication with an access network of anaccess provider 110 over anEM link 112 using theEM module 101. Theaccess provider 110 may be in communication with thenetwork 160. Using theEM module 101, themobile device 150 may establish a WAP connection to a WAP gateway of theradio access provider 110, to connect to thenetwork 160, which may include the Internet, and to receive data services from acontent server 130. Other connections may also be established, such as for storing digital information. Thecontent server 130 may implement SSL to securely communicate with the other communication endpoint. Hence, when establishing a connection betweenmobile device 150 and acontent server 130, HTTPS may be used to secure this communication. The certificates necessary for SSL may be either provided by thecontent server 130 or by acertificate authority 140 with which thecontent server 130 may be in communication via thenetwork 160. - The mobile
access control server 120,CA 140, andcontent server 130 may include a server that includes one or more memories and processors for providing and communicating digital information. Thenetwork 160 may include any wired or wireless (for example, the Internet) system that allows the communication of digital information via electromagnetic signals among digital devices and/or systems. - The mobile
access control server 120 may control the access by themobile device 100 to particular data services by providing or not providing a certificate to themobile device 150. Contrary to the common SSL procedure, the mobileaccess control server 120 may prohibit themobile device 150 from downloading certificates directly from thecontent server 130 or thecertificate authority 140. Instead, the mobileaccess control server 120 may allow themobile device 150 to receive the certificate or certificates only from the mobileaccess control server 120 via thenetwork 160. - In use, the
mobile device 150 may make a request to the mobileaccess control server 120 for access to the data service (an “access request”). This request may indicate the particular data service to which access is requested, and/or an identifier of themobile device 150 making the request. Upon receiving the access request, the mobileaccess control server 120 may determine whether themobile device 150 is allowed to access the requested data service. The mobileaccess control server 120 may make this determination based on the identifier supplied by themobile device 150 in an access request. - If the
access control server 120 determines that themobile device 150 is not allowed to access the data service, the mobileaccess control server 120 may initiate a subscription process that enables themobile device 150 to subscribe to the requested data service. - In contrast, if the mobile
access control server 120 determines that themobile device 150 is allowed to access the requested data service, the mobileaccess control server 120 may provide information relating to the content server providing the requested data service (the “access information”) to themobile device 150. The access information may include a certificate, such as an X.509 certificate. Alternately, or in addition, the access information may include a session key that enables the mobile device to decrypt the encrypted data service. Before providing the access information to themobile device 150, the mobileaccess control server 120 may determine whether the access information is stored within the mobileaccess control server 120. If the access information is not stored within the mobileaccess control server 120, the mobile access control server may request the access information from thecontent server 130 or acertificate authority 140. The mobileaccess control server 120 may then receive the access information. In addition, the mobileaccess control server 120 may store the access information. Having the mobileaccess control server 120 obtain and store the access information may provide a faster response to subsequent access requests, and may significantly reduce the signaling between themobile device 150 and the mobileaccess control server 120 for subsequent access requests. This may be relevant when themobile device 150 is in communication with the mobileaccess control server 120 over an EM link having scarce resources. - The mobile
access control server 120 may then communicate the access information to themobile device 150 via thenetwork 160 and perhaps through anaccess provider 110. Alternately, the mobileaccess control server 120 may provide a message to themobile device 150 indicating a location within the mobileaccess control server 120 from which the access information may be obtained by themobile device 150. In particular, the message mentioned above may be a systems management server (“SMS”) or multimedia message service (“MMS”) message, which may indicate a location within the mobileaccess control server 120 in the form of a uniform resource locator (“URL”). Upon receiving such a message, themobile device 150 may request the access information in the location indicated in the message. In turn, the mobileaccess control server 120 may communicate the access information to themobile device 150, which may store the access information for current and/or later use. - If the
mobile device 150 makes the access request through anaccess provider 110 that charges a time-based fee for access to thenetwork 160, in order to save resources and reduce costs, the mobile device may terminate the EM link 112 to theaccess provider 110 after making the access request. Further, so that themobile device 150 may obtain the access information from the mobileaccess control server 120, themobile device 150 may include a timer (not shown) that is started during or after themobile device 150 makes the access request. When the timer expires, themobile device 150 may reestablish communication with theaccess provider 110 to request and receive the access information from the mobileaccess control server 120. Hence, the timer may be used to trigger establishment or reestablishment of EM link 112 between themobile device 150 and theaccess provider 110. After the access information is received, the mobile device may terminate theEM link 112. - The
mobile device 150 may use the access information to establish an encrypted connection (or a “session,” for example when made within HTTPS) to thecontent server 130 or to decrypt encrypted data communicated with the data service via thecontent server 130. In some cases, themobile device 150 may only use secure communication when accessing a data service (such as a data service that provides data delivery according to the SSL de facto standard or HTTPS protocol), if themobile device 150 has the access information needed to establish a session or connection for communicating encrypted data. Further, when trying to receive an encoded data service, such as an audio or video broadcast service, from acontent server 130, themobile device 150 may only be capable of receiving and decoding the data that is provided with the correct session key. Hence, the access to data services may be controlled by a mobileaccess control server 120 by only providing themobile device 150 with the necessary access information for successfully receiving the requested data service, if themobile device 150 is granted access to the service by the mobileaccess control server 120. This access control mechanism is also independent from the point of access of the mobile device to the network. - Prior to making an access request to the mobile
access control server 120, themobile device 150 may determine whether the access information is stored in themobile device 150, itself. If the access information is stored in themobile device 150, for example as the result of a previous access request, themobile device 150 may establish an encrypted connection to thecontent server 130 or decrypt encrypted data provided by the data service via thecontent server 130 using the stored access information. Because themobile device 150 determines whether themobile device 150 itself stores the access information, themobile device 150 only may only need to make an access request once for a given data service. Taking an HTTPS session as an example, as long as the access information, such as a certificate, received from the mobileaccess control server 120 is valid for establishing session with the desired content server, no extra signaling between the mobileaccess control server 120 and themobile device 150 may be needed. However, in some cases, the access information may be valid only for a given amount of time (the “validity period”). Therefore, the mobileaccess control server 120 may still control access to the data services because themobile device 150 may need to submit an access request to the mobileaccess control server 120 to have access to the data service after the validity period ends. - Another networked system is shown in
FIG. 2 . Thenetworked system 200 ofFIG. 2 may include alone or in any combination: a mobileaccess control server 220, one or moremobile devices 250, systems (which may include methods and/or devices) for providing control of mobile access to a data service. Further, thenetworked system 200 may include acertificate authority 240, which provides authentication by creating and issuing certificates. Thenetworked system 200 may also include a content server that may include a digital video broadcast/digital audio broadcast (“DVB/DAB”)provider 230. Thenetworked system 200 may also include anetwork 260 that enables the other components of the networked system to be in communication with each other. The descriptions of the components of thenetworked system 100 discussed in relation toFIG. 1 , may apply to the corresponding components in thenetworked system 200 shown inFIG. 2 . - The
mobile device 250 may include, alone or in any combination: aprocessor 203,navigation system 204,user interface 205,input module 206,broadcast receiver 202, andmemory 207. In addition, themobile device 250 may include a receiver for receiving data, including digital video and/or digital audio broadcasts. For example, as shown inFIG. 2 , the receiver may include a DVB/DAB receiver 208. Although the description that follows is made in terms of a DVB receiver, themobile device 250 may include any type of receiver for receiving digital video and/or digital audio broadcasts. DVB is merely one example of an international digital broadcast standard for television, audio and data. DVB may include broadcast via satellite 202 (“DVB-S”), cable (“DVB-C”), terrestrial systems (“DVB-T”), or via DVB-H, for small mobile systems. In addition DVB/DAB data (programs) may be provided via IP networks. - DVB may provide digital video, audio and data streams. According to the different DVB standards, one or more streams may be provided by a
DVB provider 230. When broadcasting via DVB-S, DVB-C or DVB-T and antennas, there may be several broadcast channels available. In other words, multiple streams may be provided on different carrier frequencies. Each stream may be identified by an identification that may be referred to as a “stream_ID.” - Each stream may carry a plurality of different broadcast programs. A DVB transport stream (“TS”) uses variable length frames (each a “program elementary stream” or “PES”). Each PES may include a header (a “PES header”) and a payload section. The payload section may include data, and the PES header may identify the program to which the data that follows the PES header belongs, and the length of the data. Hence, the DVB stream may carry multiple multiplexed broadcast programs.
- In addition, to the payload data carrying streams, one or more “control streams” or “control channels” may be broadcasted. A control stream may identify the different programs multiplexed in each DVB TS. The control channels may include a program association table (“PAT”), program map table (“PMT”), conditional access table (“CAT”), and network information table (“NIT”).
- The PAT may indicate the location of the corresponding PMT. The PAT may also provide the location of the NIT. The PMT may identify and indicate the locations of the streams that make up each service (video, audio or data), and the type of the encryption used on the data. The CAT provides information on the CA systems used in the multiplex. This information is private, depends on the CA system, and may include the location of the EMM stream, when applicable. The NIT may provide information about the physical network. A comparable implementation of frame structures, streams and lookup tables may be used for DAB.
- The DAB and DVB streams may also be protected from unauthorized access by scrambling. An example of a CA system implemented with a scrambling method is described in ETR 289 (Digital Video Broadcasting (“DVB”); Support for use of scrambling and Conditional Access (“CA”) within digital broadcasting systems). The scrambling method may operate on the payload of a TS packet when TS-level scrambling is used. A structuring of program elementary stream (“PES”) packets may be used to implement PES-level scrambling with the same scrambling algorithm.
- According to the PES level scrambling method, the PES packet header may not be scrambled and TS packets containing parts of a scrambled PES packet may not contain an adaptation field (with the exception of the TS packet containing the end of the PES packet). The header of a scrambled PES packet may not span multiple TS packets. The TS packet carrying the start of a scrambled PES packet may be filled by the PES header and the first part of the PES packet payload.
- The first part of the PES packet payload may be scrambled in the same manner as a TS packet with a similar sized payload. The remaining part of the PES packet payload may be split in super-blocks of 184 bytes. The super-blocks may be scrambled as a TS packet payload of 184 bytes. The end of the PES packet payload may be aligned with the end of the TS packet by inserting an adaptation field (an “AF”) of suitable size. If the length of the PES packet is not a multiple of 184 bytes, the last part of the PES packet payload (from 1 to 183 bytes) may be scrambled in the same manner as a TS packet with a similar sized payload.
- The PES level scrambling method may put some constraints on the multiplexing process to make the de-scrambling process easier. This may create some bit-rate overhead if AFs are needed in TS packets carrying scrambled PES packets. When this is the case, a TS packet containing only an AF may be inserted.
- For applications that scramble MPEG-2 sections, a problem may arise because the MPEG-2 specified syntax does not include any scrambling control bits. Therefore, the scrambling of sections may be at the TS level and may be signaled by the scrambling control field bits. Clear and scrambled sections may not be combined in a single TS packet. The MPEG-2 defined padding mechanism may be used to create TS packets with only clear or only scrambled sections. The end of a TS packet carrying a Section may be filled with bytes having a value of 0xFF, in order to separate clear and scrambled sections into different TS packets.
- The algorithm described above is designed to minimize the amount of memory in the de-scrambler circuit at the expense of the complexity in the scrambler. The exact amount of memory and the de-scrambling delay depend on actual implementations.
- To secure the broadcast of DVB/DAB programs, the payload data may be encrypted by a symmetrical session key, which may be distributed to subscribers of the respective DVB program. Therefore, by controlling the distribution of a valid session key, the access to a DVB/DAB programs may be controlled. The mobile
access control server 220 may distribute the session key for a DVB channel to themobile device 250 upon receiving an access request from themobile device 250 and determining whether themobile device 250 is allowed to receive the requested channel (data service). The session key may be valid for a certain time period only, such that also timely limited subscriptions may be possible. Information about the validity period of a session key may be also communicated from the mobileaccess control server 220 to themobile device 250 along with the session key. - A method for controlling mobile access to a data service is shown in
FIG. 3 . Other methods may be used, such as the method described in connection withFIG. 4 . Themethod 300 shown inFIG. 3 may be implemented with a mobile device and a mobile access control server, such as those shown inFIG. 1 (reference numbers FIG. 2 (reference numbers method 300 may be implemented to allow secured data delivery from a data server through network. For example, in addition to HTTPS based service delivery, DVB channels may be delivered via the Internet and an access network to the mobile device. - The mobile device may determine whether it has received a request for a data service from the
user 301. Alternately, the request may come from other external sources or from the mobile device itself, and generally identifies the requested data service. The request may include the URL of a data service that is located on an HTTPS. - When the mobile device determines that it has received a request, the mobile device may determine whether the one or more certificates required to access the requested data service is available from the mobile device itself 302. This may involve determining whether the mobile device or any other device or system with which the mobile device is in communication is storing the required certificate(s). For example, the mobile device may have stored the required certificate(s) in its memory. If the mobile device determines that the required certificate is available from the mobile device itself, determining whether the required certificate is available from the
mobile device 302 may also include the mobile device determining whether the certificate is still valid or whether the certificate has expired. If the required certificate is available from the mobile device, this, may be due to a previous access request made by the mobile device to the requested data service. - If the required certificate is available from the mobile device itself, the mobile device may establish a connection with the content server on which the requested data service is stored 303. For example, the mobile device may establish an SSL connection to the selected
HTTPS content server 303 according to the SSL protocol. - In contrast, if the required certificate is not available from the mobile device, the mobile device may send an access request for the required certificate to an access control server, content server, or CA. However, in some cases the mobile device may be not allowed to obtain the missing certificate directly from either the content server, or the CA. The access request may identify the required certificate, requested data service, or the content server on which the requested data service resides. For example, the access may include the HTTPS-URL of the content server on which the desired data service resides. Further, the access request may include an identifier ID which uniquely identifies the mobile device. This information may be used by the mobile access control server to determine whether the requesting mobile device is allowed to receive the requested data service offered from the content server corresponding to the HTTPS-URL indicated in the access request. In addition, this information may also be used to send a requested certificate(s) and/or an error message back to the mobile device. The identification may be, for example a unique identification identifying the mobile device, user, or a vehicle or in which the mobile device may be used.
- After sending the access request to the mobile access control server, the mobile device may await a response from the mobile
access control server 305. The mobile device may wait indefinitely or until a predetermined amount of time has expired for a response from mobile access control server. If the mobile device waits indefinitely, it will wait until a response from the mobile control access device is received. If, however, the mobile device waits for only a fixed amount of time, when the mobile device determines that the fixed time period has expired (timedout), the mobile device may communicate an error message to the user. The mobile device may communicate an error message with an output module. For example, the error message may inform the user that the mobile access control server did not respond to the access request, or denied access to the desired data service. - In contrast, when the mobile device receives a response to the access request, the mobile device may determine whether the response from the mobile access control server includes the required certificate(s) 307. If the response from the mobile access control server does not include the required certificate(s), the mobile device may communicate an appropriate error message to the
user 306. If, however, the response from the mobile access control server does include the required certificate(s), the mobile device may store the required certificate(s) 308. - If the mobile device includes a browser for providing the requested service to the user, the mobile device may restart the
browser 309 before proceeding, because some browsers require that all certificates be available before the start of the browser. Restarting thebrowser 309 is optional and may be executed if required by the application used to provide the requested data service to the user. - The mobile device may retrigger the user request for the
data service 310. The data service may be requested again and the process repeats. The mobile device determines again whether all certificate(s) for setting up the SSL connections are available 302. However, the required certificate(s) may be available to the mobile device, and a connection may be established, such as an SSL connection, with thecontent server 303 on which the requested data service is stored. - With respect to the mobile access control server, the mobile access control server waits for an access request from a
mobile device 311. When the mobile access control server receives an access request from a mobile device, the mobile access control server may determine whether the mobile device making the access request requesting is allowed to access the requesteddata service 312. The mobile access control server may make this determination by identifying the mobile device and the requested service by the identifications included in the access request. The mobile access control server may then determine whether an access profile corresponding to the mobile device grants access to the requested data service. - If the access control server determines that the mobile device is not allowed to access the requested
data service 312, the mobile access control server may send a reply to the mobile device, which may include an error message indicating that access was denied. Alternatively, the mobile access control server may initiate a registration or subscription procedure with the mobile device, allowing the user to subscribe for the requested data service (not shown). - If, however, the mobile access control server determines that the mobile device does have permission to access the requested
data service 312, the mobile access control server may determine whether the required certificate(s) are available from the mobile access control server itself 313. In other words, the mobile access control server may determine whether it already stored the required certificate(s). If the mobile access control server determines that the required certificate(s) are available locally, the mobile access control server may communicate the certificate(s) to the requestingmobile device 316. If, however, the mobile access control server determines that the certificate(s) are not available locally, the mobile access control server may request the certificate(s) from the content server storing the requested data service, or acertificate authority 314. Upon receiving the certificate(s), the mobile access control server may store the certificate(s) 315 and may forward them to themobile device 316. This procedure allows the mobile access control server to control the mobile device's access to data services by controlling the distribution of the certificates required to access the data services. - Alternately, under certain circumstances, the mobile access control server may only communicate to the mobile device whether the mobile device has permission to access the requested data service and not the required certificate. For example, the mobile device may have available to it a required and unexpired certificate, but the user of the mobile device has unsubscribed from or let the subscription lapse for the corresponding data service. In this case, when the mobile device makes an access request for the data service for which the subscription has lapsed or expired, the mobile device may only request from the mobile access control server information regarding whether the user or mobile device is still allowed to use the requested data service. In response, the mobile access control server may communicate this information without communicating the required certificate.
- Another method for controlling mobile access to a data service is shown in
FIG. 4 . Thismethod 400, may be implemented by a mobile device and a mobile access control server, such as those shown inFIG. 2 (reference numbers - The mobile device may determine whether it has received a request for a data service from the
user 401. Alternately, the request may come from other external sources or from the mobile device itself, and generally identifies the requested data service. For example, in this example, the mobile device determines whether it has received a request for a DVB/DAB program 401. If the mobile device determines that a request for a DVB/DAB program has been received, the mobile device may determine whether the session key required to decrypt the requested DVB/DAB program is available from the mobile device, and whether the session key has expired (whether the session key is still valid). For example, the required session key may be stored in the memory of the mobile device itself. - If the required session key is available from the mobile device (locally available), the mobile device may receive and decrypt the DVB/
DAB program 403. For example, if the program is a DVB-S program, the broadcast receiver (seeFIG. 2 , reference number 202) of the mobile device may be tuned to the requested channel and may start receiving the data from a satellite. If the session key is already locally available from the mobile device, the mobile device may have previously communicated an access request for the requested data service or DVB/DAB program and obtained the required session key from the mobile access control server. - If, however, the mobile device determines that the required session key is not available from the mobile device, the mobile device may submit an access request for the required session key from the mobile
access control server 404. In some cases, the mobile device may be not allowed to obtain the required session key directly from the content provider (in this case a DVB/DAB provider) that supplies the requested data service (in this case, the DVB/DAB program). The access request may identify the requested data service or DVB/DAB program. For example, the access request may include the channel code for the requested DVB/DAB. Further, the access request may include an identifier that allows the mobile access control server to uniquely identify the mobile device. The mobile access control device may use the identifier to determine whether the requesting mobile device is allowed to receive the requested DVB/DAB program from the DVB/DAB provider. The mobile access control server may also use the identifier to send the requested session key and/or an error message back to the mobile device. - The mobile device may await a response from the mobile
access control server 405 for a predetermined or indefinite time interval. Upon expiry of a predetermined time interval (in other words, the request times out), the mobile device may interrupt the access request output anappropriate error message 406 using the user interface of the mobile device, for example, a display, speakers or both. The error message may communicate to the user that the mobile access control server did not respond or that the mobile access control server denied access to the DVB/DAB program. - Upon receiving a response from the mobile access control server, the mobile device determines whether the response from the mobile access control server includes the required
session key 407. If the response from the mobile access control server does not include the required session key, and receives, for example, an access denied message, an appropriate error message may be communicated to theuser 406. If, however, the mobile device determines that the response from the mobile access control server includes the required session key, the mobile device may store the session key within the mobile device itself 408. - The mobile device may then retrigger the request for the DVB/
DAB program 409. Themethod 400 may repeat from step fromstep 402, during which the mobile device again determines whether the required session key is available from the mobile device. In this instance, the required session key may be stored at the mobile device, having been stored during the previous iteration of themethod 400, and the requested DVB/DAB program can may be received, successfully decrypted and communicated to theuser 403. - In this
method 400, the mobile access control server determines whether it has received an access request from themobile device 411. When the mobile access control server determines that it has received an access request from the mobile device, the mobile access control server may determine whether the mobile device making the access request is allowed to receive or use the requested DVB/DAB program ordata service 412. For example, the mobile access control server may examine an access profile that corresponds with the mobile device identified in the access request and determine whether the access profile grants access to the requested data service. - If the mobile access control server determines that the requesting mobile device is not allowed to access the requested data service, the mobile access control server may communicate an access denied message to the
mobile device 412. Alternatively, the mobile access control server may initiate a registration or subscription procedure with the mobile device that allows the user to subscribe to the requested DVB/DAB program or data service. - If the mobile access control server determines that the requesting mobile device is allowed to access requested data service, and perhaps that the session key is valid, the mobile access control server may determine whether the required session key is available locally and if the required session key is valid 413. In other words, the mobile access control server may determine whether the session key is already stored in the mobile access control server itself. If the mobile access control device determines that the session key is already stored in the mobile access control server, and perhaps is valid, the mobile access control server may communicate the session key to the requesting
mobile device 416. If the required session key is not available locally, the mobile access control server may request the required session key from the DVB/DAB provider 414. Upon receiving the required session key, the mobile access control server may store the requiredsession key 415 and may forward the required session key to themobile device 416. Thismethod 400 allows the mobile access control server to control the access of the mobile devices to DVB/DAB programs by controlling the distribution of the required session keys. - Alternately, under certain circumstances, the mobile access control server may only communicate to the mobile device whether the mobile device has permission to access the requested data service and not the session key required to do so. For example, the mobile device may have available to it a required and unexpired session key, but the user of the mobile device has unsubscribed from or let the subscription lapse for the corresponding data service, such as a DVB/DVA program. In this case, when the mobile device makes an access request for the data service for which the subscription has lapsed or expired, the mobile device may only request from the mobile access control server information regarding whether the user or mobile device is still allowed to use the requested data service. In response, the mobile access control server may communicate this information without communicating the required session key. In another example, the mobile access control server may track the valid session keys provided to a mobile device. Upon lapse of or unsubscription from a data service, the mobile access control server may cause the mobile device to delete the session key for the lapsed or unsubscribed data service.
-
FIGS. 5 through 8 illustrate exemplary message flow diagrams illustrating the message flow between the different components of thenetworked system 100 shown inFIG. 1 . An example of a message flow that may result when a mobile device makes an access request for a data service from the mobile access control server is shown inFIG. 5 . In this example the mobile access control module has stored the requested certificate locally. Initially, the user, through a user interface of the mobile device (seeFIG. 1 , reference number 105) may communicate a request for an HTTPS-URL to themobile device 501. When the mobile device receives this request, the mobile device may determine whether the certificate required for the requested data service are locally available 502. In the example illustrated, the certificate is not available, and therefore the mobile device may send an access request for the certificate to the mobileaccess control server 503. - Upon receiving the access request from the mobile device, the mobile access control server may determine whether the requesting mobile device is allowed to access the requested data service, and if the requesting mobile device is allowed to access the requested data service, whether the required certificate is locally stored 504. In this example, the certificate is stored in the mobile access control server, and therefore, may be communicated by the mobile access control server to the mobile device in a
reply message 505. - The mobile device may then store the required
certificate 506, and may optionally initiate a restart of the browser application used for providing the data service to theuser 507. For example, the mobile device may communicate a command to the user interface of the mobile device to restart the browser application. The user interface may then restart thebrowser 508, and may retrigger the request for thedata service 509. The mobile device may again determine whether the required certificate available locally 510. In this instance, the certificate is available for the mobile device locally because the mobile device received and stored the certificate in the prior iteration. The mobile device may then initiate the setup of a secure SSL connection to the content provider of thedata service 511. - In a variation of the message flow shown in
FIG. 5 , the mobile device may communicate messages to the user interface, which are communicated to the user to inform the user about the status of the user's request. For example, when the mobile device makes an access request for a certificate to access adata service 503, a corresponding message may be output to the user. In another example, when the mobile device receives the required certificate from the mobile access control server, the user interface may communicate this event to the user. In addition, error messages may be communicated as described in connection withFIG. 2 andFIG. 3 . - In another example, if the user requests a DVB/DAB program, the message flow may be similar to that shown in
FIG. 5 . The user may communicate the requested DVB/DAB program to the mobile device by tuning the mobile device to the requested encrypted DVB channel. The mobile device may then perform the actions as described in connection withFIG. 3 . Because a link between an access network of an access provider and the mobile device may not be required for the mobile device to receive the DVB/DAB program, the mobile device, using its EM module (seereference number 201 inFIG. 2 ), may not have established an EM link with the network (seereference number 260 inFIG. 2 ). Therefore, mobile device may request permission from the user before establishing a link to the mobile access control server to download a required session key if the required session key is not stored locally. Upon establishing a link with the mobile access control server, the mobile device may request a session key for the DVB/DAB program. The mobile device may store the session key upon reception of the session key from the mobile access control server. - Another example of a message flow that may result when a mobile device makes an access request for a data service from the mobile access control server is shown in
FIG. 6 . In this example, the requested certificate is not available at the mobile access control server, which then requests the certificate from the content server providing the requested data service. As discussed in connection withFIG. 5 , upon receiving a request for a data service from the user via theuser interface 501, the mobile device determines whether the certificate required to access the requested data service is available from themobile device 502. The mobile device may determine that the required certificate is not available from the mobile device, and therefore makes an access request for the required certificate to the mobileaccess control server 503. Upon determining that the requested certificate is not locally available 504, the mobile access control server may send a certificate request message to the content server providing the requestedservice 601. The mobile access control server may, for example, send a message according to the SSL protocol. In response, the content server may send the required certificate to the mobileaccess control server 602. Upon receiving the certificate from the content server, the mobile access control server may store thecertificate 505. The remainingmessages FIG. 5 with the same respective reference numbers. - Another message flow that may result when a mobile device makes an access request for a data service from the mobile access control server is shown in
FIG. 7 .Messages FIG. 5 . Further,messages FIG. 6 . Some of the message flow shown inFIG. 7 corresponds to the message flow shown inFIG. 6 , except as set forth in the following description. In this example, the content server may redirect the mobile access control server to a certificate authority to obtain the required certificate from 701. Therefore, upon receiving a request for the content server's certificate from the mobile access control server, the content server may reply with a message indicating the certificate authority from which the mobile access control server may obtain the requiredcertificate 701. - Upon receiving this redirect message from the content server, the mobile access control server may send a certificate request message to the certificate authority indicated by the
content server 702. The request message indicates the data service or content server for which the certificate is requested. In response to the request, the certificate authority may communicate a reply message that includes requestedcertificate 703. Upon receiving the certificate, the mobile access control server may store thecertificate 603 and forward the certificate to themobile device 505. The remaining messages correspond to those shown inFIG. 6 . - Another message flow that may result when a mobile device makes an access request for a data service from the mobile access control server is shown in
FIG. 8 . In this example, access to data services and DVB/DAB programs is controlled by the mobile access control server, which controls the provision of certificates or session keys to the mobile device. However, this message flow differs from those previously discussed in that the mobile device is permitted to contact the content server or the DVB/DAB provider directly.Messages FIG. 5 . When the user interface requests adata service 501, and the mobile device has determined that the certificate required to access the requested data service is not locally available 502, the mobile device may request the certificate directly from the content server that provides the requesteddata service 801. The request communicated by the mobile device may include an identification uniquely identifying the requesting mobile device. - The content server may then communicate to the mobile access control server a message that may include the identification of the requesting mobile device and the requested
data service 802. This “access grant” message may be used by the content server whether the requesting mobile device is allowed to receive the requested data service or not. The access control server may extract the identification of the mobile device and the requested service from the access grant message. Using this information, the mobile access control server may determine whether the requesting mobile device is allowed to access the requested data service. The mobile access control server may then send an access grant reply back to the content server indicating whether the mobile device is allowed to access the requesteddata service 803. - If the access grant reply indicates to the to the content server that the mobile device is not allowed to access the requested data service, the content server may communicate a message to the mobile device indicating that the mobile device is denied access to the requested data service. Further, the content server may not provide its certificate to the mobile device, and the mobile device may not establish a SSL connection with the content server for the requested data service. If, however, the access grant reply indicates to the to the content server that the mobile device is allowed to access the requested data service, the content server may communicate a message to the mobile device indicating that the mobile device is granted access to the requested
data service 804. Upon receiving the content server's certificate, the mobile device may store thecertificate 506. The other messages exchanged between user interface andmobile device FIG. 5 . - Another message flow that may result when a mobile device makes an access request for a data service from the mobile access control server is shown in
FIG. 9 . A session key for an encrypted DVB/DAB program may be obtained in a manner similar to that shown inFIG. 8 . However, in the example ofFIG. 9 , the mobile device may request the user's permission to establish an EM link with an access network of an access provider before the mobile device requests the session key for the requested encrypted DVB/DAB program from the DVB/DAB provider. In the manner described in connection withFIG. 8 , the DVB/DAB provider may request permission from the mobile access control server to provide the necessary session key to the mobile device. - The distribution of session keys required to decrypt DAB and/or DVB programs is discussed more closely with reference to
FIGS. 9 through 11 .FIG. 9 shows a message flow between the different components of a networked system, such as that shown inFIG. 2 . In this example, a user using the user interface of the mobile device or the mobile device itself may request a DVB/DAB program 901. The mobile device may determine whether the session key required to decrypt the requested DVB/DAB program (the “prog_ID”) is available from themobile device 902. Further, if the session key is available locally, the mobile device may determine whether the session key has expired. If the session key is locally available and valid, the mobile device may directly receive the DVB/DAB program, and decrypt its data (not shown inFIG. 9 ). If, however, the required session key is not available from the mobile device or has expired, the mobile device may communicate an access request for the required session key to the mobileaccess control server 903, which indicates the requested program (for example, includes the prog_ID). Further, the access request may include an identifier (“ID”) that uniquely identifies the mobile device. - Upon receiving the access request, the mobile access control server may determine whether the required session key is locally available 904. If the mobile access control server determines that the required session key is locally available, the mobile access control server may communicate a reply message, which may include the session key, to the
mobile device 908. However, if the mobile access control server determines that the session key is not locally available, the mobile access control server may communicate a message to the DVB/DAB provider requesting the requiredsession key 905. Upon reception of this message, the DVB/DAB provider may provide the requested session key, which may be identified by a DVB/DAB program identifier included in the request message, to the content server in areply message 906. - The mobile access control server may store the
session key 909 and may forward the session key to themobile device 908. In turn, the mobile device may store thesession key 909 and may restart the user interface as previously explained in connection withFIG. 5 . Upon storing the session key, the mobile device may receive the DVB/DAB program and decrypt the program's data stream using thesession key 910. -
FIG. 10 shows a message flow between the different components of a networked system, such as that shown inFIG. 2 . In this example, the session key is provided differently than in the example discussed in connection withFIG. 9 . In the example ofFIG. 10 , the mobile device may not consistently maintain a connection with the mobile access control server during while obtaining the session key. As indicated bymessages session key 903. After communicating theaccess request 903 the mobile device may disconnect the communication link with theaccess network 1002. This may avoid extra costs imposed by access providers that charge for access on a time-basis. - Because no communication link between the mobile device and the access network exists when the mobile access control server receives a
session key 906 or determines that it has a valid session key locally available, the mobile access control server may communicate a separate message to the mobile device through the access network in which information identifying a location within the mobile access control server at which the requested session key may be found. For this purpose, the mobile access control server may communicate an SMS, or MMS message comprising the URL to the mobile device. - Upon receiving the
message 906, the mobile device may again establish a communication link with theaccess network 1005, and may request the session key from the URL provided by the mobileaccess control server 1006. In response to the request, the mobile access control server may provide the session key to themobile device 1007. Upon receiving the session key, the mobile device may close the communication link with theaccess network 1008. The remaining steps correspond to those described with reference toFIGS. 5 and 9 , respectively. -
FIG. 10 shows a message flow between the different components of a networked system, such as that shown inFIG. 2 . In this example, the mobile device includes a timer, which may be used to trigger the establishment of a communication channel with the mobileaccess control server 1102. This is in contrast to the example described in connection withFIG. 10 , in which the mobile access control server pushing a message to the mobile device to inform the mobile device of the availability of access information for the requested DVB/DAB program. - In the message flow of
FIG. 11 , when the timer T expires and a communication channel is established with the mobileaccess control server 1002, the mobile device may (re)transmit an access request for the session key to the mobileaccess control server 1103. The access control server may determine whether the session key associated with the DVB/DAB program identifier (prog_ID) provided in the access request is available at the mobileaccess control server 1104. The timer period T may be chosen to increase the probability that a session key was previously requested 905, obtained from a third source, such as the DVB/DAB provider 906, and stored 907 by the mobile access control server prior to the (re)transmission of theaccess request 1103. When the timer period T is chosen in this manner, the mobile access control server should have the required session key available when the mobile access control server receives theaccess request 1103. Nevertheless, the mobile access control server may verify the availability of thesession key 1104 and may forward the session key, if locally stored, to the mobile device in areply message 1105. - If, however, the mobile access control server determines that the session key is not stored at the mobile access control server itself, this determination may be communicated with the mobile device. Upon reception of this negative feedback message, the mobile device may restart the timer T, and may communicate an access request for the session key after the timer T has expired. If the timer is restarted a predetermined number of times, and the session key cannot be obtained from the mobile access control server, the mobile device may assume that the session key is not available, or could not be obtained by the mobile access control server, and may communicate this information in an error message to the user. Alternatively or additionally, when the mobile access control server sends the negative feedback to the mobile device, the mobile access control server may communicate a reason for the failure to obtain a session key. The mobile device may then communicate this information to the user.
- The principles described with reference to the various Figures may be applied to obtain access information in any form, such as certificates or session keys. In order to allow the mobile device to establish a new communication link and obtain the access information from a specified location on the mobile access control server, the mobile device may obtain certificates from the mobile access control server in a manner similar to using a message to inform the mobile device of the availability of access information on the mobile access control server. Further, a timer may be employed in a similar manner to (re)establish a communication link between the mobile device and the mobile access control server, and to obtain access information in form of certificates from an identified location in the mobile access control server. Also, a manner similar to that described in connection with
FIG. 8 may be implemented to obtain a session key from the content provider, such as a DVB/DAB provider. - While various embodiments of the invention have been described, it will be apparent to those of ordinary skill in the art that many more embodiments and implementations are possible within the scope of the invention. Accordingly, the invention is not to be restricted except in light of the attached claims and their equivalents.
Claims (3)
1. A mobile device in a networked system comprising a content server providing a data service, the mobile device and an access control server, wherein the mobile device is adapted to access the data service and be controlled by the access control server.
2. An access control server in a networked system comprising a content server providing a data service, a mobile device and the access control server connected to each other via a network, wherein the access control server is configured to determine whether the mobile device is permitted to access the data service.
3. A networked system for controlling access to a data service, comprising:
a content server configured to provide the data service;
a mobile device configured to request access to the data service; and
an access control server in communication with the mobile device and configured to determine whether the mobile device is permitted to access the data server.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US13/107,112 US20110219430A1 (en) | 2003-11-07 | 2011-05-13 | Secure networked system for controlling mobile access to encrypted data services |
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP03025679A EP1530339B1 (en) | 2003-11-07 | 2003-11-07 | Method and apparatuses for access control to encrypted data services for a vehicle entertainment and information processing device |
EPEP03025679.6 | 2003-11-07 | ||
US10/984,731 US7953871B2 (en) | 2003-11-07 | 2004-11-08 | Secure networked system for controlling mobile access to encrypted data services |
US13/107,112 US20110219430A1 (en) | 2003-11-07 | 2011-05-13 | Secure networked system for controlling mobile access to encrypted data services |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US10/984,731 Continuation US7953871B2 (en) | 2003-11-07 | 2004-11-08 | Secure networked system for controlling mobile access to encrypted data services |
Publications (1)
Publication Number | Publication Date |
---|---|
US20110219430A1 true US20110219430A1 (en) | 2011-09-08 |
Family
ID=34429308
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US10/984,731 Active 2029-05-13 US7953871B2 (en) | 2003-11-07 | 2004-11-08 | Secure networked system for controlling mobile access to encrypted data services |
US13/107,112 Abandoned US20110219430A1 (en) | 2003-11-07 | 2011-05-13 | Secure networked system for controlling mobile access to encrypted data services |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US10/984,731 Active 2029-05-13 US7953871B2 (en) | 2003-11-07 | 2004-11-08 | Secure networked system for controlling mobile access to encrypted data services |
Country Status (5)
Country | Link |
---|---|
US (2) | US7953871B2 (en) |
EP (1) | EP1530339B1 (en) |
JP (1) | JP4866542B2 (en) |
AT (1) | ATE388568T1 (en) |
DE (1) | DE60319542T2 (en) |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN104320486A (en) * | 2014-11-10 | 2015-01-28 | 连云港杰瑞电子有限公司 | Intelligent traffic platform data integration method based on big data |
US20160381141A1 (en) * | 2015-06-26 | 2016-12-29 | Samsung Electronics Co., Ltd. | Communication method between terminals and terminal |
Families Citing this family (88)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8788092B2 (en) | 2000-01-24 | 2014-07-22 | Irobot Corporation | Obstacle following sensor scheme for a mobile robot |
US8412377B2 (en) | 2000-01-24 | 2013-04-02 | Irobot Corporation | Obstacle following sensor scheme for a mobile robot |
US6956348B2 (en) | 2004-01-28 | 2005-10-18 | Irobot Corporation | Debris sensor for cleaning apparatus |
US7571511B2 (en) | 2002-01-03 | 2009-08-11 | Irobot Corporation | Autonomous floor-cleaning robot |
US6690134B1 (en) | 2001-01-24 | 2004-02-10 | Irobot Corporation | Method and system for robot localization and confinement |
US8396592B2 (en) | 2001-06-12 | 2013-03-12 | Irobot Corporation | Method and system for multi-mode coverage for an autonomous robot |
US7429843B2 (en) | 2001-06-12 | 2008-09-30 | Irobot Corporation | Method and system for multi-mode coverage for an autonomous robot |
US9128486B2 (en) | 2002-01-24 | 2015-09-08 | Irobot Corporation | Navigational control system for a robotic device |
US8386081B2 (en) | 2002-09-13 | 2013-02-26 | Irobot Corporation | Navigational control system for a robotic device |
US8428778B2 (en) | 2002-09-13 | 2013-04-23 | Irobot Corporation | Navigational control system for a robotic device |
GB0319918D0 (en) * | 2003-08-23 | 2003-09-24 | Ibm | Method system and device for mobile subscription content access |
ATE388568T1 (en) * | 2003-11-07 | 2008-03-15 | Harman Becker Automotive Sys | METHOD AND DEVICES FOR ACCESS CONTROL TO ENCRYPTED DATA SERVICES FOR AN ENTERTAINMENT AND INFORMATION PROCESSING DEVICE IN A VEHICLE |
US7752453B2 (en) * | 2004-01-08 | 2010-07-06 | Encryption Solutions, Inc. | Method of encrypting and transmitting data and system for transmitting encrypted data |
US7526643B2 (en) * | 2004-01-08 | 2009-04-28 | Encryption Solutions, Inc. | System for transmitting encrypted data |
US8031865B2 (en) * | 2004-01-08 | 2011-10-04 | Encryption Solutions, Inc. | Multiple level security system and method for encrypting data within documents |
US7332890B2 (en) | 2004-01-21 | 2008-02-19 | Irobot Corporation | Autonomous robot auto-docking and energy management systems and methods |
CN100375424C (en) * | 2004-03-22 | 2008-03-12 | 国际商业机器公司 | Multimedia information receiving and transmitting method system, gateway and customer's equipment |
DE112005000738T5 (en) | 2004-03-29 | 2007-04-26 | Evolution Robotics, Inc., Pasadena | Method and device for determining position using reflected light sources |
EP1776623B1 (en) | 2004-06-24 | 2011-12-07 | iRobot Corporation | Remote control scheduler and method for autonomous robotic device |
US8972052B2 (en) | 2004-07-07 | 2015-03-03 | Irobot Corporation | Celestial navigation system for an autonomous vehicle |
US7706917B1 (en) | 2004-07-07 | 2010-04-27 | Irobot Corporation | Celestial navigation system for an autonomous robot |
US8005913B1 (en) | 2005-01-20 | 2011-08-23 | Network Protection Sciences, LLC | Controlling, filtering, and monitoring of mobile device access to the internet, data, voice, and applications |
US7620476B2 (en) | 2005-02-18 | 2009-11-17 | Irobot Corporation | Autonomous surface cleaning robot for dry cleaning |
US8392021B2 (en) | 2005-02-18 | 2013-03-05 | Irobot Corporation | Autonomous surface cleaning robot for wet cleaning |
US8670866B2 (en) | 2005-02-18 | 2014-03-11 | Irobot Corporation | Autonomous surface cleaning robot for wet and dry cleaning |
US7890634B2 (en) * | 2005-03-18 | 2011-02-15 | Microsoft Corporation | Scalable session management |
US8930023B2 (en) | 2009-11-06 | 2015-01-06 | Irobot Corporation | Localization by learning of wave-signal distributions |
US7657746B2 (en) * | 2005-04-22 | 2010-02-02 | Microsoft Corporation | Supporting statements for credential based access control |
US9948882B2 (en) * | 2005-08-11 | 2018-04-17 | DISH Technologies L.L.C. | Method and system for toasted video distribution |
JP4554473B2 (en) * | 2005-08-26 | 2010-09-29 | パナソニック株式会社 | Content server device |
US20070101408A1 (en) * | 2005-10-31 | 2007-05-03 | Nakhjiri Madjid F | Method and apparatus for providing authorization material |
US9269265B2 (en) * | 2005-11-29 | 2016-02-23 | Google Technology Holdings LLC | System and method for providing content to vehicles in exchange for vehicle information |
KR101300492B1 (en) | 2005-12-02 | 2013-09-02 | 아이로보트 코퍼레이션 | Coverage robot mobility |
EP2466411B1 (en) | 2005-12-02 | 2018-10-17 | iRobot Corporation | Robot system |
ES2623920T3 (en) | 2005-12-02 | 2017-07-12 | Irobot Corporation | Robot system |
EP2816434A3 (en) | 2005-12-02 | 2015-01-28 | iRobot Corporation | Autonomous coverage robot |
ES2334064T3 (en) | 2005-12-02 | 2010-03-04 | Irobot Corporation | MODULAR ROBOT. |
US8438657B2 (en) * | 2006-02-07 | 2013-05-07 | Siemens Aktiengesellschaft | Method for controlling the access to a data network |
EP2548492B1 (en) | 2006-05-19 | 2016-04-20 | iRobot Corporation | Removing debris from cleaning robots |
US8417383B2 (en) | 2006-05-31 | 2013-04-09 | Irobot Corporation | Detecting robot stasis |
US8942618B2 (en) | 2006-06-05 | 2015-01-27 | The Directv Group, Inc. | Method and system for moving and playing content from home-based system to mobile system |
US20070280477A1 (en) * | 2006-06-05 | 2007-12-06 | The Directv Group, Inc. | Method and system for providing conditional access authorizations to a mobile receiving device |
US8527770B2 (en) * | 2006-07-20 | 2013-09-03 | Research In Motion Limited | System and method for provisioning device certificates |
DE602006019230D1 (en) * | 2006-07-20 | 2011-02-10 | Research In Motion Ltd | Apparatus and method for supplying equipment certificates |
US8353048B1 (en) * | 2006-07-31 | 2013-01-08 | Sprint Communications Company L.P. | Application digital rights management (DRM) and portability using a mobile device for authentication |
US20080059409A1 (en) * | 2006-09-06 | 2008-03-06 | Marie Jose Montpetit | Method and Apparatus for Controlling Access to Content Streamed to Remote Devices |
FR2906096B1 (en) * | 2006-09-19 | 2008-10-24 | Radiotelephone Sfr | METHOD FOR SECURING SESSIONS BETWEEN A RADIO TERMINAL AND EQUIPMENT IN A NETWORK |
JP2008079091A (en) * | 2006-09-22 | 2008-04-03 | Fujitsu Ltd | Authentication system using electronic certificate |
US7826356B2 (en) * | 2006-11-08 | 2010-11-02 | International Business Machines Corporation | Method and system for controlling flow in an asymmetric communication channel |
US7925216B2 (en) | 2006-11-10 | 2011-04-12 | The Directv Group, Inc. | Mobile receiver solutions for accessing broadband video-on-demand services |
US8875206B2 (en) | 2006-11-22 | 2014-10-28 | The Directv Group, Inc. | Method and system for securely providing content to a portable media player device |
US7747703B2 (en) | 2006-11-22 | 2010-06-29 | The Directv Group, Inc. | Method and system for targeted marketing to a portable media player device owner |
US8107626B2 (en) | 2006-11-22 | 2012-01-31 | The Directv Group, Inc. | Method and system for enabling transfer of content between a storage device and a portable media player device |
US8243923B2 (en) * | 2006-12-13 | 2012-08-14 | The Directv Group, Inc. | Method and system for providing a predeactivation warning in a system having a conditional access authorization expiration in a mobile receiving device |
US8175514B2 (en) | 2007-01-22 | 2012-05-08 | The Directv Group, Inc. | Method and apparatus for providing preauthorization for a mobile receiving device to access wireless networks |
US20080222707A1 (en) * | 2007-03-07 | 2008-09-11 | Qualcomm Incorporated | Systems and methods for controlling service access on a wireless communication device |
CN101657983B (en) * | 2007-04-09 | 2011-03-16 | Lg电子株式会社 | Providing and using of information on video related to traffic situation |
US8364778B2 (en) * | 2007-04-11 | 2013-01-29 | The Directv Group, Inc. | Method and system for using a website to perform a remote action on a set top box with a secure authorization |
KR101345528B1 (en) | 2007-05-09 | 2013-12-27 | 아이로보트 코퍼레이션 | Autonomous robot |
US8325925B2 (en) * | 2007-07-10 | 2012-12-04 | Hewlett-Packard Development Company, L.P. | Delivery of messages to a receiver mobile device |
US8561114B2 (en) | 2007-10-13 | 2013-10-15 | The Directv Group, Inc. | Method and system for ordering video content from a mobile device |
US9824389B2 (en) * | 2007-10-13 | 2017-11-21 | The Directv Group, Inc. | Method and system for confirming the download of content at a user device |
US20090195355A1 (en) * | 2008-02-01 | 2009-08-06 | Cynthia Sue Mitchell | Methods and apparatus for place shifting content to a vehicle entertainment system |
US10015158B2 (en) | 2008-02-29 | 2018-07-03 | Blackberry Limited | Methods and apparatus for use in enabling a mobile communication device with a digital certificate |
US9479339B2 (en) * | 2008-02-29 | 2016-10-25 | Blackberry Limited | Methods and apparatus for use in obtaining a digital certificate for a mobile communication device |
US20100057583A1 (en) * | 2008-08-28 | 2010-03-04 | The Directv Group, Inc. | Method and system for ordering video content using a link |
US10827066B2 (en) * | 2008-08-28 | 2020-11-03 | The Directv Group, Inc. | Method and system for ordering content using a voice menu system |
US8032164B2 (en) * | 2008-09-22 | 2011-10-04 | Interdigital Patent Holdings, Inc. | Method and apparatus for communicating short message service and supplementary services messages |
US8374127B2 (en) * | 2009-10-26 | 2013-02-12 | Lg Electronics Inc. | Digital broadcasting system and method of processing data in digital broadcasting system |
US8949597B1 (en) * | 2009-12-22 | 2015-02-03 | Sprint Communications Company L.P. | Managing certificates on a mobile device |
WO2011103198A1 (en) | 2010-02-16 | 2011-08-25 | Irobot Corporation | Vacuum brush |
US9449324B2 (en) | 2010-11-11 | 2016-09-20 | Sony Corporation | Reducing TV licensing costs |
US8621227B2 (en) * | 2010-12-28 | 2013-12-31 | Authernative, Inc. | System and method for cryptographic key exchange using matrices |
DE102011006904A1 (en) * | 2011-04-06 | 2012-10-11 | Bayerische Motoren Werke Aktiengesellschaft | Vehicle communication system, access data device and telematics communication system |
GB2507226B (en) | 2011-08-30 | 2020-04-22 | Hewlett Packard Development Co | Virtual high privilege mode for a system management request |
JP5809362B2 (en) | 2011-08-30 | 2015-11-10 | ヒューレット−パッカード デベロップメント カンパニー エル.ピー.Hewlett‐Packard Development Company, L.P. | Communication with virtual trusted runtime BIOS |
US20130250780A1 (en) * | 2011-09-16 | 2013-09-26 | Qualcomm Incorporated | Systems and methods for network quality estimation, connectivity detection, and load management |
US9736045B2 (en) | 2011-09-16 | 2017-08-15 | Qualcomm Incorporated | Systems and methods for network quality estimation, connectivity detection, and load management |
US9558362B2 (en) * | 2012-01-23 | 2017-01-31 | Antonio Subires Bedoya | Data encryption using an external arguments encryption algorithm |
US9277249B2 (en) | 2012-07-24 | 2016-03-01 | The Directv Group, Inc. | Method and system for providing on-demand and pay-per-view content through a hospitality system |
US9973492B2 (en) | 2012-12-25 | 2018-05-15 | At&T Mobility Ip, Llc | Unified mobile security system and method of operation |
US9197413B1 (en) * | 2013-02-06 | 2015-11-24 | Rockwell Collins, Inc. | Hybrid secure communication system and method |
US9055057B1 (en) | 2013-09-23 | 2015-06-09 | Emc Corporation | Automatic elevation of system security |
JP2015204090A (en) * | 2014-04-16 | 2015-11-16 | Kddi株式会社 | Method, device and program for establishing secure link between server and terminal by using telephone number |
US9363566B2 (en) | 2014-09-16 | 2016-06-07 | The Directv Group, Inc. | Method and system for prepositioning content and distributing content in a local distribution system |
US10110575B2 (en) * | 2015-01-29 | 2018-10-23 | Docusign, Inc. | Systems and methods for secure data exchange |
JP7208707B2 (en) | 2017-02-17 | 2023-01-19 | キヤノン株式会社 | Information processing device and its control method and program |
EP3679684B1 (en) | 2017-09-29 | 2022-07-20 | Huawei International Pte. Ltd. | Securing outside-vehicle communication using ibc |
Citations (15)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6036090A (en) * | 1997-07-17 | 2000-03-14 | Telefonaktiebolaget Lm Ericsson | Automated prepayment method for mobile terminals |
US6212182B1 (en) * | 1996-06-27 | 2001-04-03 | Cisco Technology, Inc. | Combined unicast and multicast scheduling |
US20020026427A1 (en) * | 2000-08-31 | 2002-02-28 | Sony Corporation | Person authentication application data processing system, person authentication application data processing method, information processing apparatus, and program providing medium |
US20020059614A1 (en) * | 1999-08-27 | 2002-05-16 | Matti Lipsanen | System and method for distributing digital content in a common carrier environment |
US6490356B1 (en) * | 1997-03-21 | 2002-12-03 | Jean-Bernard Gerard Maurice Beuque | Broadcast receiving system comprising a computer and a decoder |
US20030037097A1 (en) * | 2001-07-20 | 2003-02-20 | Meyer Andre Philippe | Accessing information content |
US20030050918A1 (en) * | 2000-04-10 | 2003-03-13 | Pilkington John Dr | Provision of secure access for telecommunications system |
US20030061512A1 (en) * | 2001-09-27 | 2003-03-27 | International Business Machines Corporation | Method and system for a single-sign-on mechanism within application service provider (ASP) aggregation |
US20030115456A1 (en) * | 2000-01-17 | 2003-06-19 | Amit Kapoor | Customizable public key infrastructure and development tool for same |
US20030157930A1 (en) * | 2002-01-17 | 2003-08-21 | Ntt Docomo, Inc. | Server device, mobile communications terminal, information transmitting system and information transmitting method |
US20030200184A1 (en) * | 2002-04-17 | 2003-10-23 | Visa International Service Association | Mobile account authentication service |
US6735672B2 (en) * | 2000-09-29 | 2004-05-11 | Matsushita Electric Industrial Co., Ltd. | Data storage array device and data access method |
US20040268148A1 (en) * | 2003-06-30 | 2004-12-30 | Nokia, Inc. | Method for implementing secure corporate Communication |
US6980660B1 (en) * | 1999-05-21 | 2005-12-27 | International Business Machines Corporation | Method and apparatus for efficiently initializing mobile wireless devices |
US7953871B2 (en) * | 2003-11-07 | 2011-05-31 | Harman Becker Automotive Systems Gmbh | Secure networked system for controlling mobile access to encrypted data services |
Family Cites Families (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2002541687A (en) * | 1999-02-11 | 2002-12-03 | ラウドアイ・テクノロジーズ・インコーポレーテッド | Media distribution system |
JP3865105B2 (en) * | 2000-02-29 | 2007-01-10 | 株式会社ケンウッド | Content distribution system and distribution method |
JP2002064425A (en) * | 2000-08-21 | 2002-02-28 | Matsushita Electric Ind Co Ltd | Wide-area data delivery system |
JP2002099538A (en) * | 2000-09-25 | 2002-04-05 | Ntt Comware Corp | Personal service menu providing method, its portal server system and its recording medium |
GB2371711B (en) * | 2000-11-27 | 2004-07-07 | Nokia Mobile Phones Ltd | A Server |
JP2003034201A (en) * | 2001-07-25 | 2003-02-04 | Ntt Comware Corp | On-vehicle data reproducing apparatus, data reproducing method and data reproducing program |
JP2003331140A (en) * | 2002-05-13 | 2003-11-21 | Kyocera Corp | Information managing device and information providing system |
JP2003330474A (en) * | 2002-05-13 | 2003-11-19 | Kyocera Corp | Music delivery system |
JP2004240655A (en) * | 2003-02-05 | 2004-08-26 | Ntt Docomo Inc | Contents distribution system, contents distribution method, communication terminal, program and storage medium |
JP4228762B2 (en) * | 2003-04-18 | 2009-02-25 | トヨタ自動車株式会社 | Information providing method, information providing system, and information terminal device |
JP4184893B2 (en) * | 2003-08-04 | 2008-11-19 | 日本電信電話株式会社 | Content usage method and system |
-
2003
- 2003-11-07 AT AT03025679T patent/ATE388568T1/en not_active IP Right Cessation
- 2003-11-07 EP EP03025679A patent/EP1530339B1/en not_active Expired - Lifetime
- 2003-11-07 DE DE60319542T patent/DE60319542T2/en not_active Expired - Lifetime
-
2004
- 2004-11-08 US US10/984,731 patent/US7953871B2/en active Active
- 2004-11-08 JP JP2004324405A patent/JP4866542B2/en active Active
-
2011
- 2011-05-13 US US13/107,112 patent/US20110219430A1/en not_active Abandoned
Patent Citations (15)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6212182B1 (en) * | 1996-06-27 | 2001-04-03 | Cisco Technology, Inc. | Combined unicast and multicast scheduling |
US6490356B1 (en) * | 1997-03-21 | 2002-12-03 | Jean-Bernard Gerard Maurice Beuque | Broadcast receiving system comprising a computer and a decoder |
US6036090A (en) * | 1997-07-17 | 2000-03-14 | Telefonaktiebolaget Lm Ericsson | Automated prepayment method for mobile terminals |
US6980660B1 (en) * | 1999-05-21 | 2005-12-27 | International Business Machines Corporation | Method and apparatus for efficiently initializing mobile wireless devices |
US20020059614A1 (en) * | 1999-08-27 | 2002-05-16 | Matti Lipsanen | System and method for distributing digital content in a common carrier environment |
US20030115456A1 (en) * | 2000-01-17 | 2003-06-19 | Amit Kapoor | Customizable public key infrastructure and development tool for same |
US20030050918A1 (en) * | 2000-04-10 | 2003-03-13 | Pilkington John Dr | Provision of secure access for telecommunications system |
US20020026427A1 (en) * | 2000-08-31 | 2002-02-28 | Sony Corporation | Person authentication application data processing system, person authentication application data processing method, information processing apparatus, and program providing medium |
US6735672B2 (en) * | 2000-09-29 | 2004-05-11 | Matsushita Electric Industrial Co., Ltd. | Data storage array device and data access method |
US20030037097A1 (en) * | 2001-07-20 | 2003-02-20 | Meyer Andre Philippe | Accessing information content |
US20030061512A1 (en) * | 2001-09-27 | 2003-03-27 | International Business Machines Corporation | Method and system for a single-sign-on mechanism within application service provider (ASP) aggregation |
US20030157930A1 (en) * | 2002-01-17 | 2003-08-21 | Ntt Docomo, Inc. | Server device, mobile communications terminal, information transmitting system and information transmitting method |
US20030200184A1 (en) * | 2002-04-17 | 2003-10-23 | Visa International Service Association | Mobile account authentication service |
US20040268148A1 (en) * | 2003-06-30 | 2004-12-30 | Nokia, Inc. | Method for implementing secure corporate Communication |
US7953871B2 (en) * | 2003-11-07 | 2011-05-31 | Harman Becker Automotive Systems Gmbh | Secure networked system for controlling mobile access to encrypted data services |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN104320486A (en) * | 2014-11-10 | 2015-01-28 | 连云港杰瑞电子有限公司 | Intelligent traffic platform data integration method based on big data |
US20160381141A1 (en) * | 2015-06-26 | 2016-12-29 | Samsung Electronics Co., Ltd. | Communication method between terminals and terminal |
US10193980B2 (en) * | 2015-06-26 | 2019-01-29 | Samsung Electronics Co., Ltd. | Communication method between terminals and terminal |
Also Published As
Publication number | Publication date |
---|---|
DE60319542T2 (en) | 2009-04-02 |
JP2005143120A (en) | 2005-06-02 |
US7953871B2 (en) | 2011-05-31 |
EP1530339A1 (en) | 2005-05-11 |
EP1530339B1 (en) | 2008-03-05 |
ATE388568T1 (en) | 2008-03-15 |
JP4866542B2 (en) | 2012-02-01 |
DE60319542D1 (en) | 2008-04-17 |
US20050154795A1 (en) | 2005-07-14 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7953871B2 (en) | Secure networked system for controlling mobile access to encrypted data services | |
EP1449347B1 (en) | Key management protocol and authentication system for secure internet protocol rights management architecture | |
CA2719975C (en) | Method and apparatus for providing broadcast service using encryption key in a communication system | |
US20100153709A1 (en) | Trust Establishment From Forward Link Only To Non-Forward Link Only Devices | |
US20030063750A1 (en) | Unique on-line provisioning of user terminals allowing user authentication | |
CA2486690C (en) | Association of security parameters for a collection of related streaming protocols | |
EP1499127B1 (en) | A method of distributing real time data streams across a multimedia network as well as a mediation device and a multimedia network therefore | |
KR100981568B1 (en) | Apparatus and method protecting contents supported broadcast service between service provider and several terminals | |
KR20100092987A (en) | System and method for using drm to control conditional access to broadband digital content | |
JP2004135281A (en) | Stable multicast flow | |
WO2004002112A1 (en) | Encryption of streaming control protocols and their headers | |
JP2011172276A (en) | Method, device and system for relating entities for protecting content to each other | |
KR20080014929A (en) | System and method for using drm to control conditional access to broadband digital content | |
MX2012014963A (en) | Systems and methods for authorizing access to network services using information obtained from subscriber equipment. | |
KR101182515B1 (en) | Apparatus and method for broadcast services transmission and reception | |
KR20040083504A (en) | A hybrid network encrypt/decrypt scheme | |
KR20060105934A (en) | Apparatus and method jointing digital rights management contents between service provider supported broadcast service and terminal, and the system thereof | |
WO2005083917A1 (en) | Improvements relating to digital broadcasting communications | |
JP2009524309A (en) | Method, device, computer program, data carrier and computer program product for preventing the reception of media data of a multicast service by unauthorized devices | |
KR20070121241A (en) | Any media |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: HARMAN BECKER AUTOMOTIVE SYSTEMS GMBH, GERMANY Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:KUZ, VOLKER;BEHRENS, RALPH;BEHRENS, GRIT;SIGNING DATES FROM 20030331 TO 20030403;REEL/FRAME:026387/0052 |
|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- AFTER EXAMINER'S ANSWER OR BOARD OF APPEALS DECISION |