Apparatus and method for autorizing access to a service according to device proximity

Patent metadata

Field	Value
Publication number	US-10028201-B2
Application number	US-201715633874-A
Country	US
Kind code	B2
Filing date	Jun 27, 2017
Priority date	Jun 28, 2016
Publication date	Jul 17, 2018
Grant date	Jul 17, 2018

Abstract

A device and a method for authorizing access to a service on a first device upon detection of a second device located in near proximity, while preferably using broadcast transmission, is disclosed. The second device broadcasts on a second broadcast network a message comprising at least a group identifier common to the set of devices that can access the service and a time reference value corresponding to the emission time of the message, according to a common time reference received by all devices from a first broadcast network. The first device authorizes access to the service only if the group identifier received from the message is the same as the group identifier of the device and if the delay between the measured arrival of the message and its emission time is lower than a threshold.

First claim

The invention claimed is:

1. A method for controlling access to a service on a first device, comprising at a processor of the first device:
obtaining a time reference through a first broadcast communication network;
obtaining a message from a second device through a second broadcast communication network, wherein the message comprises at least a group identifier common to a set of devices for which the service is authorized and an emission time of the message on the second broadcast communication network, where the emission time is given with reference to the time reference obtained from the first broadcast communication network;
determining a transmission delay between the emission time of the message and an arrival time of the message, wherein the emission time of the message is comprised in the message and the arrival time is measured by the first device with reference to the time reference obtained from the first broadcast communication network;
determining the validity of the received message, the message being determined valid in case the group identifier comprised in the message is the same as the group identifier of the first device and in case said transmission delay is lower than a threshold; and
authorizing the access to the service in case the received message is valid.

2. The method according to claim 1 further comprising additional access constraints based on a counter, wherein access to the service is authorized only when the counter is greater than zero, said counter being incremented in case the received message is valid and decremented at determined time intervals.

3. The method according to claim 1 further comprising:
extracting from the received message a value reflecting the number of retransmissions allowed; and
when the value reflecting the number of retransmissions allowed is greater than zero:
build a new message wherein the emission time is updated and the value reflecting the number of retransmissions is decremented; and
transmit the new message on the second broadcast communication network.

4. The method according to claim 1 , wherein the second broadcast communication is wireless and configured to have limited coverage.

5. The method according to claim 1 , wherein the time reference is an absolute time reference.

6. The method according to claim 1 wherein the time reference is a relative time reference.

7. The method according to claim 1 wherein the service to be authorized is one of access to a television channel, access to a personal image, access to a personal video and access to a device setup.

8. Computer program comprising program code instructions executable by a processor for implementing the steps of a method according to claim 1 .

9. Computer program product which is stored on a non-transitory computer readable medium and comprises program code instructions executable by a processor for implementing the steps of a method according to claim 1 .

10. A device for controlling access to a service on a first device, comprising:
an interface to a first broadcast communication network configured to obtain a time reference through the first broadcast communication network;
an interface to a second broadcast communication network configured to obtain a message from a second device through the second broadcast communication network, wherein the message comprises at least a group identifier common to a set of devices for which the service is authorized and an emission time of the message on the second broadcast communication network, where the emission time is given with reference to the time reference obtained from the first broadcast communication network;
memory configured to store at least a group identifier common to the set of devices for which the service is authorized and a value indicating if the device is a first or second device; and
a processor configured to:
determine a transmission delay between the emission time of the message and an arrival time of the message, wherein the emission time of the message is comprised in the message and the arrival time is measured by the first device with reference to the time reference obtained from the first broadcast communication network;
determine the validity of the received message, the message being determined valid in case the group identifier comprised in the message is the same as the group identifier of the first device and in case said transmission delay is lower than a threshold; and
authorize the access to the service when the received message is valid.

11. The device according to claim 10 further comprising additional access constraints based on a counter, wherein the access to the service is only authorized when the counter is greater than zero, said counter being incremented in case the received message is valid and decremented at determined time intervals.

12. The device according to claim 10 wherein the interface to the first broadcast communication network is one of a satellite broadcast interface, a terrestrial broadcast interface, a cable network interface and a broadband network.

13. The device according to claim 10 wherein the interface to the second broadcast communication network is using one of WiFi, ZigBee and Bluetooth technologies.

14. The device according to claim 10 wherein the service to be authorized is one of access to a television channel, access to a personal image, access to a personal video and access to a device setup.

Assignees

• Thomson Licensing

Inventors

• Fontaine Patrick
• Vigouroux Jean-Ronan
• Le Merrer Erwan

Classifications

• H04W84/20

  Leader-follower arrangements · CPC title

• H04W76/40

  for selective distribution or broadcast · CPC title

• H04L43/16

  Threshold monitoring · CPC title

• H04W84/12

  WLAN [Wireless Local Area Networks] · CPC title

• H04W4/06

  Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services · CPC title