Systems and methods for controlling access to media assets using two-factor authentication

Patent metadata

Field	Value
Publication number	US-10524003-B2
Application number	US-201616066243-A
Country	US
Kind code	B2
Filing date	Nov 14, 2016
Priority date	Oct 24, 2016
Publication date	Dec 31, 2019
Grant date	Dec 31, 2019

Abstract

Systems and methods for authorizing operations associated with blocked media assets using two-factor authentication. In some aspects, a media guidance application (e.g., executed by a set-top box or other user equipment used to store and display media assets) prompts a user for a password (e.g., a personal information number) in order to unlock the content for viewing. In response to receiving a second request from the user to perform an operation related to the media asset (e.g., delete), the media guidance application prompts the user for an additional factor confirming his or her identity, consistent with two-factor authentication protocol. If the user's identity is authenticated as a user that has authority to perform the operation related to the media asset (e.g., delete the stored media asset), the media guidance application performs the operation related to the media asset (e.g., deletes the media asset).

First claim

What is claimed is:

1. A method for authorizing operations associated with blocked media assets using two-factor authentication, the method comprising:
receiving a first request to access a media asset for viewing on user equipment, wherein access to the media asset is blocked;
receiving a first input of a first authorization code;
determining that the received first authorization code matches a stored first identifier granting access to view the media asset;
based on determining that the received first authorization code matches the stored first identifier:
generating the media asset for display;
receiving a second request to execute an operation associated with the media asset;
based on receiving the second request:
querying a parental control database for information relating to permissible operations associated with the media asset;
determining from the information that a second authorization code is required to execute the operation associated with the media asset, wherein the second authorization code is generated periodically as a function of time by a token mechanism remote from the user equipment;
receiving a second input of the second authorization code generated at a first time;
transmitting, to an authorization database, the second authorization code generated at the first time;
in response to transmitting, to the authorization database, the second authorization code generated at the first time, receiving an indication granting authorization to execute the operation associated with the media asset based on the transmitted second authorization code matching a second identifier generated at the first time; and
based on receiving the indication that the received second authorization code matches the stored second identifier, executing the operation related to the media asset.

2. The method of claim 1 , wherein determining that the received first authorization code matches the first stored identifier granting access to view the media asset comprises:
retrieving, from a field in the parental control database including a plurality of entries with stored identifiers associated with users, the first stored identifier;
determining whether the first stored identifier matches the received authorization code by comparing characters of the first stored identifier with characters of the received authorization code; and
in response to determining that the first stored identifier matches the received authorization code:
retrieving a value from a field associated with the first stored identifier; and
determining whether the user identified by the first stored identifier has access to the media asset based on the value.

3. The method of claim 1 , wherein generating for display the media asset comprises:
generating an instruction to allow access to view the media asset for a predetermined period of time;
executing the instruction, wherein the instruction stores a temporary indication, in a field associated with the first stored identifier in the parental control database, to allow access to view the media asset;
in response to executing the instruction, monitoring an elapsed time; and
in response to determining the elapsed time exceeds the predetermined period of time, deleting the temporary indication to allow access to view the media asset.

4. The method of claim 1 , further comprising:
receiving a user input to schedule the media asset for storage;
in response to receiving the user input, generating for display a user interface with a plurality of selectable options for restricting access to a corresponding plurality of operations;
receiving a selection of a selectable option for restricting access to a corresponding operation; and
in response to receiving the selection, storing, in the parental control database, information that the operation requires the second authorization code.

5. The method of claim 1 , further comprising:
in response to receiving an indication not granting authorization to execute the operation associated with the media asset based on the transmitted second authorization code not matching the second identifier generated at the first time, querying the parental control database to determine whether there is an alternate second authorization code to allow the operation; and
in response to determining that there is the alternate second authorization code to allow the operation, generating for display an indication to input the alternate second authorization code.

6. The method of claim 1 , further comprising:
accessing a user database including identifiers of users who have accessed the media asset;
retrieving, from a field in the user database associated with an identifier, contact information for a device associated with a user who has accessed the media asset; and
transmitting, to the device based on the contact information, a notification to the user that the operation associated with the media asset has been received.

7. The method of claim 6 , wherein the field is a first field, further comprising:
receiving, from the device, an indication to prevent the operation; and
storing the indication in a second field of the parental control database associated with the media asset, wherein the indication prevents the operation from being executed.

8. The method of claim 1 , wherein the user equipment is first user equipment, and wherein executing the operation related to the media asset comprises:
accessing blocks of memory containing data corresponding to the media asset; and
copying the data contained in the blocks of memory corresponding to the media asset to second user equipment.

9. The method of claim 8 , further comprising:
in response to copying the data, storing, in a field associated with the media asset in the parental control database, an indication that the media asset has been copied to the second user equipment;
receiving a third request to access the media asset on the first user equipment; and
preventing access to the media asset on the first user equipment while the media asset is copied on the second user equipment.

10. The method of claim 1 , wherein executing the operation related to the media asset comprises:
accessing a viewing progress data structure containing currently stored media assets; and
storing, in a field for the media asset, an indication that the media asset has been viewed to completion.

11. A system for authorizing operations associated with blocked media assets using two-factor authentication, the system comprising:
control circuitry configured to:
receive a first request to access a media asset for viewing on user equipment, wherein access to the media asset is blocked;
receive a first input of a first authorization code;
determine that the received first authorization code matches a stored first identifier granting access to view the media asset;
based on determining that the received first authorization code matches the stored first identifier:
generate the media asset for display;
receive a second request to execute an operation associated with the media asset;
based on receiving the second request:
query a parental control database for information relating to permissible operations associated with the media asset;
determine from the information that a second authorization code is required to execute the operation associated with the media asset, wherein the second authorization code is generated periodically as a function of time by a token mechanism remote from the user equipment;
receive a second input of the second authorization code generated at a first time;
transmit, to an authorization database, the second authorization code generated at the first time;

Assignees

• Rovi Guides Inc

Inventors

• Sreekanth Harshith Kumar Gejjegondanahally
• Dharwa Ashwini
• Kumar Sourabh
• Agarwal Sukanya

Classifications

• H04N21/4227

  {Providing} Remote input by a user located remotely from the client device, e.g. at work · CPC title

• H04N21/4753

  for user identification, e.g. by entering a PIN or password (cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08) · CPC title

• H04N21/441

  Acquiring end-user identification {, e.g. using personal code sent by the remote control or by inserting a card} · CPC title

• G06F21/62 Primary

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title

• G06F21/121

  Restricting unauthorised execution of programs · CPC title