# US 12,015,831 B2 · Multimedia content secure access

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,015,831 B2
- Document ID: US12015831B2
- Status: Granted
- Kind: B2
- Application number: 17/770,895
- Filed: 2020-10-21
- Published: 2022-12-01
- Granted: 2024-06-18
- Earliest claimed: 2019-10-23
- Assignees: Telecom Italia S.p.A.
- Applicants: Telecom Italia S.p.A.
- Inventors: Alberto Ciarniello
- Web page: https://patentgrep.com/patent/US12015831B2

## CPC

- H04N 21/63345: {by transmitting keys (key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06)}
- H04L 9/0897: {involving additional devices, e.g. trusted platform module [TPM], smartcard or USB}
- H04N 21/25841: {involving the geographical location of the client (retrieval from the Internet by querying based on geographical locations G06F16/9537; arrangements for identifying locations of receiving stations in broadcast systems H04H60/51; location of the user terminal in data switching networks H04L67/52; services making use of the location of users or terminals in wireless networks H04W4/02; locating users or terminals in wireless networks H04W64/00)}
- H04N 21/25875: {involving end-user authentication (restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06)}
- H04N 21/4104: {Peripherals receiving signals from specially adapted client devices}
- H04N 21/43637: {involving a wireless protocol, e.g. Bluetooth®, RF or wireless LAN [IEEE 802.11] (arrangements for wireless networking or broadcasting of information in indoor or near-field type systems H04B10/114)}
- H04N 21/4623: Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] {(arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14)}
- H04N 21/6582: {Data stored in the client, e.g. viewing habits, hardware capabilities, credit card number (arrangements where receivers interact with the broadcast H04H20/38)}
- G06F 21/1014: {to tokens}
- G06F 21/35: communicating wirelessly
- H04L 2209/603: Digital right managament [DRM]
- H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A method is disclosed for providing secure access to multimedia content to a user of a content service at a first user device configured to enable the user to consume the multimedia content. The method comprises: providing, from a second user device, a user identifier to a service provider of the content service, the second user device being provided with a subscriber identity module enabling the second user device to connect to a cellular communication network, the user identifier comprising an identifier of the subscriber identity module; at the second user device, receiving an access key from the service provider, through the cellular communication network, the access key being associated with the user identifier; providing the access key from the second user device to the first user device through a short-range connection, and at the first user device, using the access key to access the multimedia content.

## Claims

### Claim 1

A method for providing secure access to multimedia content to a user of a content service at a first user device configured to enable the user to consume said multimedia content, the method comprising steps of:
a) allowing the user to select said multimedia content;
b) after allowing the user to select said multimedia content, receiving, at a second user device of the user, an object identifier associated with said multimedia content;
c) providing, from the second user device of the user, a user identifier to a service provider of said content service, said second user device being provided with a subscriber identity module configured to connect to a cellular communication network, said user identifier comprising an identifier of said subscriber identity module;
d) at the second user device, receiving an access key from the service provider, through said cellular communication network, said access key being associated with said user identifier;
e) providing, from said second user device and to the first user device through a short-range connection, said access key and said object identifier;
f) sending, to the service provider, a confirmation indicating that the access key is being used in association with said multimedia content, which is identified by said object identifier; and
g) at said first user device, using said access key to access said multimedia content.

### Claim 2 (depends on 1)

The method according to claim 1, wherein said identifier of the subscriber identity module is an MSISDN or an IMSI.

### Claim 3 (depends on 1)

The method according to claim 1, further comprises storing said user identifier in a database of the service provider to register said subscriber identity module to said content service.

### Claim 4 (depends on 1)

The method according to claim 1, further comprising, after said step d), storing the access key in a secure memory area of said subscriber identity module.

### Claim 5 (depends on 4)

The method according to claim 4, wherein said secure memory area is a secure element embedded in the subscriber identity module.

### Claim 6 (depends on 1)

The method according to claim 1, wherein steps c) and d) are performed before obtaining, from the service provider, a multimedia object providing the user with rights to access the multimedia content.

### Claim 7 (depends on 1)

The method according to claim 1, wherein steps c) and d) are performed upon obtaining a multimedia object providing the user with rights to access the multimedia content.

### Claim 8 (depends on 1)

The method according to claim 1, further comprising, before said step e), providing, from the second user device to the service provider, localization data indicating a current position of the second user device.

### Claim 9 (depends on 3)

The method according to claim 3, further comprising, at the service provider:
(i) checking whether said user identifier is stored in said database as associated with a registered subscriber identity module; and
(ii) in case check (i) is positive, checking whether said multimedia content is subjected to territorial restrictions indicating that said multimedia content is available only in a given area, and, in case said multimedia content is subjected to territorial restrictions, checking whether said second user device is currently inside said given area based on localization data indicating a current position of the second user device,
and wherein performing said step ee) is based on a positive outcome of check (i) and/or check (ii).

### Claim 10 (depends on 1)

The method according to claim 1, wherein said short-range connection is a short-range wireless connection.

### Claim 11 (depends on 10)

The method according to claim 10, wherein said short-range wireless connection is a protected short-range wireless connection.

### Claim 12 (depends on 1)

A non-transitory computer readable storage medium having software code portions stored thereon that, when executed by a computing device, perform the method of claim 1, when the software code portions are run on said computing device.

### Claim 13 (depends on 1)

The method of claim 1, wherein the service provider distributes the access key to the second user device in one or more of: a caching mode or an on-demand mode.

### Claim 14 (depends on 13)

The method of claim 13, wherein distributing the access key in the caching mode comprises providing the access key to the second user device after a registration procedure of the user, wherein the access key is deleted from the second user device upon expiration of the registration.

### Claim 15 (depends on 14)

The method of claim 14, wherein the caching mode is selected based on a prediction of a traffic peak associated with a live event.

### Claim 16 (depends on 13)

The method of claim 13, wherein distributing the access key in the on-demand mode comprises providing the access key to the second user device upon receiving a request to obtain a multimedia object.

### Claim 17

A user device comprising a subscriber identity module enabling said user device to connect to a cellular communication network to obtain multimedia content, said user device being configured to:
allow a user to select said multimedia content;
after allowing the user to select said multimedia content, receive an object identifier associated with said multimedia content;
provide a user identifier to a service provider of a content service, said user identifier comprising an identifier of said subscriber identity module;
receive an access key from the service provider through said cellular communication network, said access key being associated with said user identifier;
through a short-range connection, provide said access key and said object identifier to a further user device configured to enable the user to consume said multimedia content; and
send, to the service provider, a confirmation indicating that the access key is being used in association with said multimedia content, which is identified by said object identifier.

### Claim 18

An apparatus for providing secure access to multimedia content to a user of a content service, the apparatus comprising:
a first user device configured to enable the user to consume the multimedia content, and
a second user device configured to host a subscriber identity module, the second user device being further configured to:
allow the user to select said multimedia content;
after allowing the user to select said multimedia content, receive an object identifier associated with said multimedia content;
provide a user identifier to a service provider of the content service, the user identifier comprising an identifier of the subscriber identity module;
receive an access key from the service provider through a cellular communication network, the access key being associated with the user identifier;
provide the access key and said object identifier to the first user device; and
send, to the service provider, a confirmation indicating that the access key is being used in association with said multimedia content, which is identified by said object identifier, wherein the first user device is configured to use the access key to access the multimedia content.