# US 10,873,580 B2 · System and method for delegated authentication and authorization

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,873,580 B2
- Document ID: US10873580B2
- Status: Granted
- Kind: B2
- Application number: 15/881,542
- Filed: 2018-01-26
- Published: 2018-05-31
- Granted: 2020-12-22
- Earliest claimed: 2012-07-17
- Assignees: Tele2 Sverige AB
- Applicants: Tele2 Sverige AB
- Inventors: Johan Bolin
- Web page: https://patentgrep.com/patent/US10873580B2

## CPC

- H04L 63/0884: {by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity}
- G06F 21/105: {Arrangements for software license management or administration, e.g. for managing licenses at corporate level}
- H04L 63/0846: {using time-dependent-passwords, e.g. periodically changing passwords}
- H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)}
- H04N 21/2343: involving reformatting operations of video signals for distribution or compliance with end-user requests or end-user device requirements {(video transcoding H04N19/40; media packet handling at the source H04L65/762)}
- H04N 21/2396: {characterized by admission policies (admission control, resource allocation in open networks H04L12/5692; arrangements for network security using user profiles for access control H04L63/102; access security in wireless networks H04W12/08)}
- H04N 21/25816: {involving client authentication (restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06)}
- H04N 21/25875: {involving end-user authentication (restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06)}
- H04N 21/26613: {for generating or managing keys in general (key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04)}
- H04N 21/41265: {having a remote control device for bidirectional communication between the remote control device and client device (unidirectional remote control device H04N21/42204)}
- H04N 21/43615: {Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals (home Audio Video Interoperability [HAVI] data switching networks H04L12/2805)}
- H04N 21/441: Acquiring end-user identification {, e.g. using personal code sent by the remote control or by inserting a card}
- H04N 21/6125: {involving transmission via Internet (transmission by internet of broadcast information H04H60/82)}
- H04N 21/6175: {involving transmission via Internet (broadcast-related systems characterised by the transmission system being the Internet H04H60/82)}
- H04N 21/63345: {by transmitting keys (key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06)}
- H04N 21/64322: {IP}
- H04N 21/6582: {Data stored in the client, e.g. viewing habits, hardware capabilities, credit card number (arrangements where receivers interact with the broadcast H04H20/38)}
- H04W 12/065: Continuous authentication
- H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications}
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

The present invention provides a method for providing services to a presentation device. The method comprises detecting a service delivery module in a communication system using a communication device and performing an authentication and authorization session between the service delivery module and the communication device, wherein user authentication and authorization is created. The method further comprises connecting to a service information module in said communication system to access services; providing a service request from said communication device to said service information module and initiating a service delivery session with said service information module using said user authentication and authorization information and said service request. Moreover, the method comprises delivering at least one service to said presentation device based on said service request. The present invention further provides a communication system for providing at least one service to a presentation device.

## Claims

### Claim 1

A system for providing services to a presentation device, the system comprising:
a service control client configured to run on a communication device connected to a wireless network and to a service information module realized in a cloud network, the service information module adapted to deliver a service; and
a service delivery module comprising a wired connection to a presentation device and a wireless connection to the wireless network,
wherein the service control client is configured to detect the service delivery module,
wherein the service control client and the service delivery module are configured to perform an authentication session between each other,
wherein the service control client is further configured to send a request to the service information module for delivery of the service from the service information module to the service delivery module, the request including service delivery module identity information,
wherein the service information module is configured to deliver the service to the service delivery module based on the identity information included in the request, and
wherein the service delivery module is configured to deliver the service to the presentation device via the wired connection.

### Claim 2 (depends on 1)

The system according to claim 1, wherein the request further includes a unique key identifying a user of the service control client, the service and a session.

### Claim 3 (depends on 1)

The system according to claim 1, wherein the service delivery module is configured to receive remote control input from the communication device.

### Claim 4 (depends on 1)

The system according to claim 1, wherein the service control client is configured to present a remote control interface.

### Claim 5 (depends on 1)

The system according to claim 1, wherein the service is an account-based service.

### Claim 6 (depends on 1)

The system according to claim 1, wherein the authentication session is a SIM or PIN based authentication session.

### Claim 7 (depends on 1)

The system according to claim 1, wherein the service control client is configured to present services provided by the service information module to a user.

### Claim 8 (depends on 1)

The system according to claim 1, wherein the service control client is configured to present available presentation devices to a user.

### Claim 9

A service delivery module for delivering at least one service to a presentation device, the service delivery module comprising:
a video signal output configured to be connected to a presentation device; and
a wireless unit connected to a wireless network, for connecting the service delivery module to a service information module,
wherein the service delivery module is configured to perform an authentication session with a communication device connected to the wireless network,
wherein the service delivery module is further configured to receive, from a service information module, a service,
wherein the service delivery module is further configured to deliver the service to the presentation device via the wired connection, and
wherein the service delivery module is further configured to receive remote control input directly from the communication device.

### Claim 10 (depends on 9)

The service delivery module according to claim 9, wherein the service delivery module is an account-based service.

### Claim 11 (depends on 9)

The service delivery module according to claim 9, wherein the authentication session is a SIM or PIN based authentication session.

### Claim 12

A method for providing services to a presentation device, the method comprising:
detecting a service delivery module using a service control client configured to run on a communication device and being connected to a wireless network, the service delivery module comprising a wired connection to a presentation device and a wireless connection to the wireless network;
performing an authentication session between the service control client and the service delivery module;
requesting delivery of a service to the service delivery module from the service information module, by the service control client, the request including service delivery module identity information;
delivering the service from the service information module to the service delivery module based on the identity information in the request; and
delivering the service from the service delivery module to the presentation device via the wired connection.

### Claim 13 (depends on 12)

The method according to claim 12, further comprising receiving remote control input at the service delivery module from the communication device.

### Claim 14 (depends on 12)

The method according to claim 12, further comprising presenting a remote control interface on the communication device.

### Claim 15 (depends on 12)

The method according to claim 12, wherein performing the authentication session comprises performing a SIM or PIN based authentication session.

### Claim 16 (depends on 12)

The method according to claim 12, further comprising presenting, at the service control client, services provided by the service information module to a user.

### Claim 17 (depends on 12)

The method according to claim 12, further comprising presenting, at the service control client, available presentation devices to a user.

### Claim 18 (depends on 12)

The method according to claim 12, wherein delivering the service to the presentation device via the wired connection comprises delivering an account-based service.

### Claim 19 (depends on 12)

The method according to claim 12, further comprising adapting the service to the presentation device.

### Claim 20 (depends on 19)

The method according to claim 19, wherein the service is a video stream service, and wherein adapting the service to the presentation device comprises adapting a resolution of a video stream of the video stream service.