Granted Patent B1

US 7,933,950 · App. 10/958,642 · Granted Apr 26, 2011

Abstract

Claims (49)

1. A method, comprising:

sending, from a digital device that participates in a service, to a service provider that provides the service, a request to participate in the service;

receiving, by the digital device, a digital message that identifies a desired service state for the digital device, wherein the digital message is encoded uniquely for the digital device and at least a portion of the digital message is encrypted using a public key that is uniquely associated with the digital device to result in creating an encrypted one way hash and the encrypted one way hash is digitally signed using a signing key unique to the service provider, to result in creating an encrypted signed hash that is appended to the digital message, wherein the digital message is unusable at a different digital device;

based on the digital message, determining, by the digital device, a plurality of control values that collectively define the desired service state within the digital device the plurality of control values indicate specific capabilities of the digital device that are enabled, disabled, or set to particular values depending on the features, services or products represented in the digital message;

providing the plurality of control values to one or more applications hosted by the digital device that deliver a service experience associated with the desired service state, or at least a feature associated with the desired service state, thereby placing the digital device into a first service state;

marking the control values as non-secure at the digital device;

marking the control values as secure only after the digital device successfully decrypts the at least a portion of the digital message that is encrypted; and

changing the digital device to a second service state if the control values are not marked as secure.

2. A method as recited in claim 1 , wherein the at least a portion of the digital message is encrypted using a public key that is unique to the digital device.

3. A method as recited in claim 2 , wherein the digital message is digitally signed using a signing key of the service provider.

4. A method as recited in claim 1 , wherein the digital message is digitally signed using a signing key of the service provider.

5. A method as recited in claim 1 , wherein the digital message comprises (a) one or more sets of desired service state identifiers and expiration values in cleartext and (b) an encrypted version of the cleartext.

6. A method as recited in claim 5 , wherein the determining step comprises determining the plurality of control values based on the cleartext of the digital message and concurrently decrypting the encrypted version.

7. A method as recited in claim 1 , wherein the

changing step changes the digital device to a second service state if the control values are not marked as secure before expiration of a specified time.

8. A method as recited in claim 1 , wherein the digital message comprises a first service state identifier representing a full service state, a first expiration time value associated with the first service state identifier, and a second state identifier representing a limited service state; and further comprising the steps of:

based on the first service state identifier, determining a plurality of control values that collectively define the full service state within the digital device;

providing the control values to one or more applications hosted by the digital device that deliver a service experience associated with the full service state;

determining that a current time is equal to or greater than the first expiration time value; and

changing the digital device to the limited service state based on determining new control values based on the second state identifier.

9. A method as recited in claim 8 , wherein the second state identifier specifies a minimal service state.

10. A method as recited in claim 1 , wherein the second service state is a limited service state.

11. A method as recited in claim 1 , further comprising receiving an issue date value as part of the digital message, and generating and displaying a message indicating how long the digital device needs to implement the service state.

12. A method, comprising:

storing, by a server, a record of the payment for a service in which a digital device can participate in a database associated with a service provider that provides the service, wherein the record is uniquely associated with the digital device;

receiving, at the server from the digital device, a request from the digital device to receive the service;

based on the database record, determining, by the server, a desired service state value for the digital device corresponding to the service that was paid for;

encoding, by the server, the desired service state value in a digital message, wherein the digital message is encoded uniquely for the digital device, wherein the digital message is unusable at a different digital device, by:

creating and storing a digital one-way hash of the digital message;

encrypting the one-way hash of the digital message using a public key that is uniquely associated with the digital device, to result in creating an encrypted hash;

digitally signing the encrypted hash using a signing key unique to the service provider, to result in creating an encrypted signed hash;

appending the encrypted signed hash to the digital message;

wherein the digital message carries a plurality of control values that collectively define the desired service state that the digital device is authorized to use; securely authorizing, by the server, the plurality of control values that are enabled, disabled, or set to particular values depending on the features, services or products represented in the digital message; and

sending the digital message to the digital device that delivers a service experience associated with the service, or a feature, to an end user of the digital device.

13. A method of securely enabling features of a digital video recorder, the method comprising the computer-implemented steps of:

storing, by a server, a record of payment for a service in which a digital device can participate in a database associated with a service provider that provides the service, wherein the record is uniquely associated with the digital device;

receiving, by the server, a request from the digital device to receive the service;

based on the database record, determining, by the server, a desired service state value for the digital device corresponding to the service that was paid for;

encoding, by the server, the desired service state value in a digital message, wherein the digital message is encoded uniquely for the digital device, wherein the digital message is unusable at a different digital device, by:

creating and storing a digital one-way hash of the digital message;

encrypting the hash of the digital message using a public key that is uniquely associated with the digital device to result in creating an encrypted hash;

digitally signing the encrypted hash using a signing key unique to the service provider, to result in creating an encrypted signed hash;

appending, by the server, the encrypted signed hash to the digital message;

sending the digital message from the server to the digital device;

based on the digital message, determining, by the digital device: a plurality of control values that collectively define the desired service state within the digital device, the plurality of control values indicate specific capabilities of the digital device that are enabled, disabled, or set to particular values depending on the features, services or products represented in the digital message; and

providing the plurality of control values to one or more applications hosted by the digital device that deliver a service experience associated with the service, or a feature, to an end user of the digital device.

14. A non-transitory computer-readable medium storing one or more sequences of instructions for securely enabling features of a digital device, which instructions, when executed by one or more processors, cause the one or more processors to carry out the steps recited in any of claim 1 , 2 , 4 , 5 , 6 , 7 , 10 , 8 , 9 , 11 , 12 , 13 , or 3 .

15. An apparatus for securely enabling features of a digital device, comprising means for performing the steps recited in any of claim 1 , 2 , 4 , 5 , 6 , 7 , 10 , 8 , 9 , 11 , 12 , 13 , or 3 .

16. An apparatus for creating and storing troubleshooting information for diagnosing one or more problems experienced in one or more completed voice calls that are carried by a packet-switched data network, comprising: a network interface that is coupled to the data network for receiving one or more packet flows therefrom; a processor; one or more stored sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of any of claim 1 , 2 , 4 , 5 , 6 , 7 , 10 , 8 , 9 , 11 , 12 , 13 , or 3 .

Assignments (15)