Systems and methods for providing secure services

Patent metadata

Field	Value
Publication number	US-11991160-B2
Application number	US-201815908511-A
Country	US
Kind code	B2
Filing date	Feb 28, 2018
Priority date	Mar 15, 2013
Publication date	May 21, 2024
Grant date	May 21, 2024

Abstract

Systems and methods for providing one or more secure services are disclosed. One method can comprise authenticating and/or authorizing a user device to receive a security token. A request for information can be processed using the security token to facilitate the secure provision of services to the user device.

First claim

What is claimed is:

1. A method, comprising:
sending first availability information in an unencrypted format, wherein the first availability information relates to a first service available via a network;
sending second availability information in an encrypted format, wherein the second availability information relates to a second service available via the network; and
receiving, from a first device based on one or more of the first availability information or the second availability information, a request for the first service or a request for the second service, wherein the request for the first service or the request for the second service comprises an encrypted data field and an unencrypted data field.

2. The method of claim 1 , wherein the network comprises a local area network and wherein the first device is configured to decrypt the second availability information.

3. The method of claim 1 , further comprising authenticating, based on the request, the first device.

4. The method of claim 1 , wherein sending the first availability information in the unencrypted format comprises sending the first availability information in the unencrypted format to at least one of the first device or a second device; and
wherein sending the second availability information in the encrypted format comprises sending the second availability information in the encrypted format to at least one of the first device or the second device.

5. The method of claim 4 , wherein the second device is not configured to decrypt the second availability information, and wherein the second device is not configured to receive the second service.

6. The method of claim 1 , wherein sending the first availability information comprises broadcasting the first availability information over an area and wherein sending the second availability information comprises broadcasting the second availability information over the area.

7. The method of claim 1 , wherein the first availability information is configured to facilitate receiving the first service, and wherein the second availability information is configured to facilitate receiving the second service.

8. The method of claim 1 , further comprising:
determining, based on the encrypted data field and the unencrypted data field, that the first device is an authorized device; and
granting, to the first device, access to one or more of: the first service or the second service.

9. An apparatus, comprising:
one or more processors; and
a memory storing processor executable instructions that, when executed by the one or more processors, cause the apparatus to:
send first availability information in an unencrypted format, wherein the first availability information relates to a first service available via a network;
send second availability information in an encrypted format, wherein the second availability information relates to a second service available via the network; and
receive, from a first device based on at least one of the first availability information or the second availability information, a request for the first service or a request for the second service, wherein the request for the first service or the request for the second service comprises an encrypted data field and an unencrypted data field.

10. The apparatus of claim 9 , wherein the network comprises a local area network and wherein the first device is configured to decrypt the second availability information.

11. The apparatus of claim 9 , wherein the processor executable instructions, when executed by the one or more processors, further cause the apparatus to authenticate, based on the request for the first service or the request for the second service, the first device.

12. The apparatus of claim 9 , wherein sending the first availability information in the unencrypted format comprises sending the first availability information in the unencrypted format to the first device or a second device; and
wherein sending the second availability information in the encrypted format comprises sending the second availability information in the encrypted format to the first device or the second device.

13. The apparatus of claim 12 , wherein the second device is not configured to decrypt the second availability information, and wherein the second device is not configured to receive the second service.

14. The apparatus of claim 9 , wherein the processor executable instructions that, when executed by the one or more processors, cause the apparatus to send the first availability information further cause the apparatus to broadcast the first availability information over an area and wherein the processor executable instructions that, when executed by the one or more processors, cause the apparatus to broadcast the second availability information over the area.

15. The apparatus of claim 9 , wherein the first availability information is configured to facilitate receiving the first service, and wherein the second availability information is configured to facilitate receiving the second service.

16. The apparatus of claim 9 , wherein the processor executable instructions, when executed by the one or more processors, further cause the apparatus to:
determine, based on the encrypted data field and the unencrypted data field, that the first device is an authorized device; and
grant, to the first device, access to one or more of: the first service or the second service.

17. One or more non-transitory computer-readable media storing processor executable instructions that, when executed by at least one processor, cause the at least one processor to:
send first availability information in an unencrypted format, wherein the first availability information relates to a first service available via a network;
send second availability information in an encrypted format, wherein the second availability information relates to a second service available via the network; and
receive, from a first device based on at least one of the first availability information or the second availability information, a request for the first service or a request for the second service, wherein the request for the first service or the request for the second service comprises an encrypted data field and an unencrypted data field.

18. The one or more non-transitory computer-readable media of claim 17 , wherein the network comprises a local area network and wherein the first device is configured to decrypt the second availability information.

19. The one or more non-transitory computer-readable media of claim 17 , wherein the processor executable instructions, when executed by the at least one processor, further cause the at least one processor to authenticate, based on the request for the first service or the request for the second service, the first device.

20. The one or more non-transitory computer-readable media of claim 17 , wherein the processor executable instructions that, when executed by the at least one processor, cause the at least one processor to send the first availability information further cause the at least one processor to broadcast the first availability information over an area, and wherein the processor executable instructions that, when executed by the at least one processor, cause the at least one processor to send the second availability information further cause the at least one processor to broadcast the second availability information over the area.

21. The one or more non-transitory computer-readable media of claim 17 , wherein at le

Assignees

• Comcast Cable Comm Llc

Inventors

• De Andrade David
• Ladd Patrick
• Brzozowski John
• Leddy John

Classifications

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L9/3234

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title

• H04L63/068

  using time-dependent keys, e.g. periodically changing keys (cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088) · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04W12/068

  using credential vaults, e.g. password manager applications or one time password [OTP] applications · CPC title