Systems and methods for providing secure services

Patent metadata

Field	Value
Publication number	US-9942213-B2
Application number	US-201314079174-A
Country	US
Kind code	B2
Filing date	Nov 13, 2013
Priority date	Mar 15, 2013
Publication date	Apr 10, 2018
Grant date	Apr 10, 2018

Abstract

Systems and methods for providing one or more secure services are disclosed. One method can comprise authenticating and/or authorizing a user device to receive a security token. A request for information can be processed using the security token to facilitate the secure provision of services to the user device.

First claim

What is claimed is:

1. A method comprising;
authenticating a first device;
providing an authorization element based upon the authentication of the first device;
authorizing the first device using the authorization element;
providing a security token to the first device based upon the authorization of the first device, wherein the first device is within a first network and the security token is received by the first device from a second network external to the first network; and
providing the security token to a second device, wherein the second device is within the first network, and wherein the second device receives a request for information from the first device via the first network, the request for information comprising an unencrypted data field and an encrypted data field, and wherein the encrypted data field is encrypted using the security token such that the second device will authenticate the request for information using the security token.

2. The method of claim 1 , wherein authenticating the first device comprises using a public key infrastructure protocol.

3. The method of claim 1 , wherein the security token is associated with an addressable identifier.

4. The method of claim 1 , wherein the security token comprises a renewable security token.

5. The method of claim 1 , wherein the second device comprises a content gateway.

6. The method of claim 1 , wherein the encrypted data field comprises an encrypted state of the unencrypted data field.

7. The method of claim 1 , the first network comprises a local area network.

8. A method comprising;
receiving, at a first device in a first network, a request for information comprising an encrypted data field and an unencrypted data field, wherein the request for information is from a second device in the first network;
receiving, at the first device, a security token from a second network external to the first network;
decrypting the encrypted data field using the security token, wherein the encrypted data field relates to one or more available services;
comparing the decrypted data field and the unencrypted data field; and
if the decrypted data field matches the unencrypted data field, providing access to the one or more available services to the second device.

9. The method of claim 8 , wherein the security token comprises a renewable security token.

10. The method of claim 8 , wherein the encrypted data field comprises the encrypted state of the unencrypted data field.

11. The method of claim 8 , wherein one or more of the encrypted data field or the unencrypted data field comprises a time stamp.

12. The method of claim 8 , wherein the second device comprises an authorized device.

13. The method of claim 8 , wherein the one or more available services comprises a secure service.

14. The method of claim 8 , wherein the first device comprises a content gateway.

15. A method comprising:
receiving, at a first device in a first network, a security token from a second device in a second network external to the first network based on authentication of user credentials received at the first device;
generating, at the first device, a request for a service comprising a first unencrypted portion and a second portion encrypted based on the security token;
providing, via the first network, the request for the service to a third device in the first network, wherein the third device is configured to authenticate the request by comparing a result of decrypting the second portion to the first unencrypted portion;
receiving, at the first device, access to the service in response to the third device authenticating the request; and
providing the service to a user device in response to receiving access to the service.

16. The method of claim 15 , wherein the request is processed by the second device independent of manufacturer credentials associated with the first device.

17. The method of claim 15 , wherein the security token comprises a renewable security token having a predetermined time duration before expiration.

18. The method of claim 15 , wherein the service is advertised, via encrypted availability information, in the first network, and wherein the first network is a local area network, and further comprising decrypting the encrypted availability information based on the security token.

19. The method of claim 15 , wherein the first network comprises a local area network.

20. The method of claim 15 , wherein the service comprises a video service, and wherein the second portion comprises the first unencrypted portion encrypted based on the security token.

Assignees

• Comcast Cable Comm Llc

Inventors

• De Andrade David
• Ladd Patrick
• Brzozowski John
• Leddy John

Classifications

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L9/3234

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title

• H04L63/068

  using time-dependent keys, e.g. periodically changing keys (cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088) · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04W12/06

  Authentication · CPC title