Method and system for data security in an IMS network

A system to perform a secure real time streaming of data over a network, the system comprising:

• one or more application servers, each configured to provide data corresponding to content or services made available by a content provider or service provider;
• one or more user equipments, each configured to request content or service data from any of the one or more application servers;
• a customized media streaming client (CMSC) module configured to determine at a user equipment requesting content or service data, prior availability of a valid CMSC for accessing the requested content or service data, wherein validity of any CMSCs available at the requesting user equipment is determined based on a service coupon uniquely corresponding to a content provider or service provider responsible for making the requested content or service data available;
• a mapper module configured to determine at the requesting user equipment, prior availability of a valid mapper, said mapper comprising a register having information reflecting correspondence between data received from an application server from which the content or service data has been requested and a valid CMSC for accessing such data, wherein validity of a mapper is determined based on a key uniquely corresponding to the content provider or service provider;
• an encryptor configured to sequentially perform a first and second encryption of the requested data wherein the first encryption uses one of a validation coupon and the service coupon and the second encryption uses the other of the validation coupon and the service coupon, the validation coupon comprising at least one of a unique identification assigned to a requesting user and a unique identification assigned to the requesting user equipment;
• a data module configured to transmit the encrypted data resulting from the sequential first and second encryption from the application server to the requesting user equipment over a network;
• a digital rights management (DRM) Agent configured to request identification of the valid CMSC from among one or more CMSCs available on the requesting user equipment, based on the information from the mapper;
• a decryptor configured to perform using the validation coupon, one of a sequential first and second decryption of the encrypted data received by the requesting user equipment;
• a decryptor configured to perform using the service coupon, the other of the sequential first and second decryption of the encrypted data received by the requesting user equipment;
• a user interface configured to receive streaming data resulting from the sequential first and second decryption.

A computer program product comprising a non-transitory computer usable medium having a computer readable program code embodied therein for performing secure real time streaming of data over a network, the computer program product comprising instructions for:

• requesting, using a user equipment, data corresponding to a content or service from one of one or more application servers, wherein the requested data is made available on the application server by a content provider or service provider;
• determining at the requesting user equipment, prior availability of a valid customized media streaming client (CMSC) for accessing the requested data, wherein validity of any CMSCs available at the requesting user equipment is determined based on a service coupon uniquely corresponding to the content provider or service provider;
• determining at the requesting user equipment, prior availability of a valid mapper, said mapper comprising a register having information reflecting correspondence between data received from the application server and a valid CMSC for accessing such data, wherein validity of a mapper is determined based on a key uniquely corresponding to the content provider or service provider;
• sequentially performing a first and second encryption of the requested data wherein the first encyption uses one of a validation coupon and the service coupon and the second encryption uses the other of the validation coupon and the service coupon, the validation coupon comprising at least one of a unique identification assigned to a requesting user and a unique identification assigned to the requesting user equipment;
• transmitting the encrypted data resulting from the sequential first and second encryption from the application server to the requesting user equipment over a network;
• sequentially performing at the valid CMSC a first and second decryption of the encrypted data wherein the first decryption uses one of the validation coupon and the service coupon and the second decryption uses the other of the validation coupon and the service coupon;
• and
• streaming the decrypted data resulting from the sequential first and second decryption to a user interface.