Abstract:
To permit non-TV CE devices to participate in a closed Internet Protocol television (IPTV) program, a non-TV CE device obtains a TV identification upon program registration which it subsequently uses to access content from the IPTV program.

Description:
I. FIELD OF THE INVENTION 
     The present application relates generally to providing TV identifications to non-TV consumer electronics (CE) devices to enable the devices to access TV services on a computer network. 
     II. BACKGROUND OF THE INVENTION 
     Internet access through TVs is typically provided by essentially programming the TV as though it were a computer executing a browser. Such Internet access is thus uncontrolled except as a firewall or filtering program might block certain sites. 
     As understood herein, uncontrolled Internet access may not be desirable in the context of a TV. A firewall or filtering program may not always be installed on the TV and even when one is installed, access remains much more uncontrolled than conventional TV programming traditionally has expected. Also, a locally installed filter can be unloaded or defeated by a user. 
     Accordingly, uncontrolled Internet access has several drawbacks. From a viewer&#39;s standpoint, exposure to inappropriate subject matter particularly when young viewers are watching is one concern; a much lower threshold of quality screening is another. That is, while many TV shows might not be widely considered as “quality” shows, nonetheless a TV program is usually much more selectively screened than, say, an Internet video. The expectations of TV viewers for such higher level quality screening as a consequence cannot be met by simply providing unfettered Internet access through the TV. Furthermore, TV-related entities, from content providers, manufacturers, and carriers, in most cases derive no benefit from the extension of TV to the Internet. 
     Present principles recognize that a closed, controlled Internet Protocol TV (IPTV) program may be established for Internet-enabled TVs to access selected Internet sites which in turn agree to provide only appropriate, quality content to TVs in the program. However, such a program may be restricted to TVs if they are based on an participating TVs providing a TV identification (TVID) that has been burned into the hardware of the TV. Without a TVID, access to the TV-Internet infrastructure may not be permitted. As recognized herein, it may be desirable to provide non-TV consumer electronic (CE) devices access to the closed, controlled TV-Internet program but such devices will not possess the requisite TVID (an ID formatted to indicate that the device is a TV), complicating opening the infrastructure to such devices. 
     SUMMARY OF THE INVENTION 
     Accordingly, a non-TV consumer electronic (CE) device includes a housing, a display on the housing, and a network interface. A processor controls the display and communicates with the Internet through the network interface. The non-TV CE device includes a non-TV CE device identification including a CE device serial number. The processor executes logic which includes prompting a user to register to use an Internet TV (IPTV) program at least in part by entering a username and password. The logic also includes providing the username and password in a secure fashion to an auxiliary server. The processor sends a request including a secure hash of at least a media access code (MAC) of the CE device and the CE device serial number. Responsive to verification of the CE device by the auxiliary server, the processor receives from the auxiliary server an encrypted string including a TVID that is different from the CE device identification and formatted as an identification of a television. Using the username and password as a key, the processor decrypts from the encrypted string the TVID. Subsequently, responsive to user input indicating a desire to access the IPTV program, the processor sends the TVID to a management server to obtain a user token and service list. The user token is sent to a content server that appears on the service list and a content list received from the content server. The logic further includes providing a user interface on the display from which a user may select content from the content list to be played on the CE device. 
     In some embodiments the hash of the MAC and CE device serial number provided to the auxiliary server further includes digital rights management (DRM) information and a security certificate of the CE device. If desired, the management server and auxiliary server are separate from each other. In other implementations, the management server and auxiliary server are consolidated together. Without limitation the device can be a personal computer, a personal digital assistant (PDA), or a digital clock radio. 
     In another aspect, a method includes providing a TVID to a non-TV CE device, and enabling the non-TV CE device to access content in a closed Internet Protocol television (IPTV) program using the TVID. The TVID is different from a CE device identification associated with the non-TV CE device. 
     In another aspect, a server computer includes a processor and a tangible non-transitory data storage medium accessible by the processor to execute logic. The logic includes receiving over a wide area computer network from a non-TV CE device a secure string including a username, password, and a non-TV CE device serial number. The logic decrypts the secure string, verifies contents of the string, and responsive to successful verification of the string, returns to the CE device a TVID that does not include the CE device serial number. 
     The details of the present invention, both as to its structure and operation, can best be understood in reference to the accompanying drawings, in which like reference numerals refer to like parts, and in which: 
    
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         FIG. 1  is a block diagram of an example system in accordance with present principles; 
         FIG. 2  is a message flow diagram; 
         FIG. 3  is a flow chart of example authentication logic; and 
         FIG. 4  is a flow chart of example authorization logic. 
     
    
    
     DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 
     Referring initially to  FIG. 1 , a non-TV CE device  12  includes a portable lightweight plastic housing  14  bearing a digital processor  16 . The processor  16  can control a visual display  18  and an audible display  20  such as one or more speakers. 
     To undertake present principles, the processor  16  may access one or more computer readable storage media such as but not limited to disk-based storage  22  and solid state storage  24  such as dynamic random access memory (DRAM) and/or flash memory. Software code implementing present logic executable by the CE device  12  may also be stored on one of the storage devices shown to undertake present principles. Also, an identification unique to the CE device, typically including a non-TV CE device model number and serial number, can be stored on one of the storage media. 
     The processor  16  can receive user input signals from a key input device  26  such as a keypad and a point and click input device  28 . 
     As shown in  FIG. 1 , a network interface  30  such as a wired or wireless modem or wireless telephony transceiver communicates with the processor  16  to provide connectivity to a management server  32  on the Internet, multiple content servers  34 , and in some implementations an auxiliary server  36 , although the functions of the management server  32  and auxiliary server  36  may be consolidated in a single server if desired. The servers  32 ,  34 ,  36  have respective processors and data store for executing present logic. For instance, the auxiliary server  36  can have a server processor  36   a  and a tangible non-transitory data storage medium  36   b.    
     The non-TV CE device  12  may be, e.g., a laptop computer, a digital clock radio, a mobile telephone, a personal digital assistant, etc. 
     Now referring to  FIG. 2 , when a user of the CE device  12  wishes to view audio-video content, the user typically selects (“launches”) a media player such as a software-implemented media gallery application (MGA). According to an example embodiment the processor  16  checks to see if it possesses a TVID, e.g., a concatenation of a TV model number and serial number. Until the user executes initial registration this test will be false since the CE device  12  has only a non-TV CE device ID. 
     Under these conditions (no TVID) the processor  16  presents on the display  18  a user interface prompting the user to enter IPTV account registration such as username and password, which can be hashed and provided at state  38  in  FIG. 2  to the auxiliary server  36 . In an example the processor  16  under control of the MGA sends a call “STVcreateAccount” to the auxiliary server  36  using a secure mode of hypertext transfer protocol (HTTPS), e.g., a URL with parameters: username, password. A HTTP POST request is sent which may include a hash using secure hash algorithm (SHA)-256 of the media access code (MAC), serial number, Windows Media digital rights management (WMDRM), and security certificate of the CE device  12 . The MAC, serial number, and certificate are unique to the CE device  12  and are already possessed by the auxiliary server  36 , which typically is affiliated with the manufacturer of the CE device  12  or which otherwise has access to identifying information of the CE device  12 . 
     The auxiliary server  36  then decrypts the hashed string and verifies the contents of the POST message against its records. If the CE device  12  has already been registered with the auxiliary server  36 , an “error” message is returned, to prevent a hacker who has guessed the hashed string of the CE device  12  from registering another device. 
     Assuming that the information in the POST message from the CE device  12  is verified, the user account is created by the auxiliary server  36 . In one example the server  36  links the encrypted sha256 string to the username/password input by the user and turns on a flag indicating that the particular CE device  12  with the registration username and password has been registered. 
     In the example shown, the auxiliary server  36  at state  40  sends a business-to-business (B2B) call message, referred to in the diagram as a “STVregistereDevice call”, to the management server  32 . The call may include the serial number of the CE device  12 . This call requests an unused or newly created TVID of the management server  32 , which returns the requested TVID at state  42  to the auxiliary server  36 . At the management server  32  the TVID is linked to the serial number of the CE device  12 . When the management server  32  and auxiliary server  36  are consolidated states  40  and  42  are not necessary. In any case, the TVID returned by the management server  32  is different from the non-TV CE device ID in that the TVID contains a TV serial number and in some implementations a TV model number. 
     The auxiliary server  36  then combines the TVID with the username and password, encrypts the combination using, e.g., triple-data encryption standard (DES), and at state  44  returns the encrypted string to the CE device  12 . The auxiliary server  36  also links the TVID to the username and password. 
     The CE device  12  decrypts the TVID using the username and password as the key and stores the TVID on, e.g., the disk drive  22  or solid state memory  24  in  FIG. 1 . When the user of the CE device  12  subsequently wishes to obtain Internet content from the closed IPTV program, the TVID is sent at state  46  to the management server  32  to obtain, at state  48 , a user token and service list, which in turn is sent at state  50  to a content server  34  that appears on the service list which returns a service token at state  52  to the CE device  12  which the CE device  12  may use to obtain content from content server  34 .  FIGS. 3 and 4  provide further details regarding states  46 - 52 . 
     Indeed and now referring to  FIG. 3 , at block  54  the CE device  12  periodically checks in with the management server  32 . Proceeding to block  56 , the management server  32  authenticates itself to the CE device  12  so that the CE device  12  knows that it is contacting the correct server and is not being spoofed. The authentication may be undertaken using, e.g., SSL certificates. The CE device  12  can then send to the server  32  a unique CE device ID in a SSL, without requiring key encryption of the processor  16 . The CE device  12  may verify the server  32  using the public key of the certificate authority of the server certificate returned by the server  32 . 
     Block  58  indicates that next in the logic flow, the management server  32  downloads to the CE device  12  a user token along with one or more service lists each of which contains a list of network addresses of approved content servers  34 . This may be done again using SSL. The user token preferably has an expiration period after which it is no longer accepted by content servers during the authorization logic discussed below. The management server  32  provides the user token along with its expiration time to the content servers  34  for purposes to be shortly disclosed. 
     The service list is typically presented by the processor  16  in a user interface (UI) presented on the display  18 . The UI may simply present icons of service providers associated with the various approved content servers  34  whose network addresses can underlie the UI in the list. The UI may also present other content as desired such as the names of genres available at each content server, etc. In any case, a user of the CE device  12  may manipulate the input device  26  to select a member of the service list at block  60 , which causes the processor  16  to upload, though the network interface  30 , the user token to the selected content server  34  to enter the authorization logic of  FIG. 4 . 
     As discussed above, only content servers  34  on the closed and unmodifiable (except by the management server  32 ) service list(s) downloaded to the CE device  12  by the management server  32  can be selected by the user when in the IPTV program, as indicated at block  62 . As new services (embodied by newly approved content servers  34 ) become available, they can be added to the service list(s) and, hence, made available across all platforms on the fly. 
     Recall that user tokens and their expiration times are provided by the management server to the content servers  34 . Each content server  34  can then maintain a local database of active user tokens, removing each one at its respective expiration time. When a content server  34  receives a user token at block  64 , it checks it against the local database of active tokens and if the user token is in the database, the logic moves to block  66  wherein the content server  34  returns a content list to the CE device  12  along with the above-mentioned service token. Thus, no further authentication is required between the CE device  12  and content server  34  beyond the provisioning of an active user token by the CE device  12 . And, by virtue of the content server  34  appearing on the service list provided by the management server  32 , the CE device  12  knows that it may trust the content server  34  without need for any further authentication on the part of the content server  34 . 
     Essentially, a content list is a list of audio-video programs that the entity associated with the content server  34  has elected to make available to platforms in the IPTV system. Like the service list, the content lists from the content servers  34  cannot be modified by the CE device  12 . 
     Moving to block  68 , the user may manipulate the input device  26  to select a program on the content list, which is then delivered assuming the request is accompanied by a valid service token, as by streaming, from the content server  34  to the CE device  12  for presentation on the display  18  and speakers  20 . 
     While the particular PROVISION OF TV ID TO NON-TV DEVICE TO ENABLE ACCESS TO TV SERVICES is herein shown and described in detail, it is to be understood that the subject matter which is encompassed by the present invention is limited only by the claims. For example, while the logic above is divulged using the TV as an example, it can also be implemented on the baby monitor, digital alarm clock, or other CE device.