Media Gateway Encryption via HLR Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current media transmission systems face challenges in securely transmitting media content to authorized users, as they lack effective mechanisms to prevent unauthorized access and distribution.

Innovation Solution

The system employs a Home Location Register (HLR) to store encryption keys and records of entitled media content, which are used to authenticate and encrypt media content requests from communications devices, ensuring only authorized users receive encrypted content, which can then be decrypted using a device-specific key.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Speed

If media content is transmitted without encryption, then transmission speed and accessibility are improved, but security and protection from unauthorized access deteriorate

Engineering Contradiction:
Improvetransmission speedVSAvoidsecurity
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

The system performs preliminary authentication by checking the user profile in the HLR before transmission, and pre-encrypts the media content with the retrieved encryption key before sending it to the communication device. This ensures security measures are in place before actual content transmission occurs.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The HLR acts as an intermediary between the communication device and the media content. It stores encryption keys and user profiles, and the gateway uses these intermediaries to authenticate users and retrieve appropriate encryption keys without exposing the key storage system directly to communication devices.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If encryption and authentication mechanisms are implemented, then security is improved, but system complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system extracts the complex key management and authentication functions into a separate HLR system. This allows the main media transmission system to remain relatively simple while delegating security-critical operations to a specialized database system that handles key storage, user profile management, and authentication logic.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The HLR serves multiple functions: storing encryption keys, maintaining user profiles, tracking entitled media content, and performing authentication. This multi-functionality reduces the need for separate systems for each security operation, thereby managing overall system complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Measurement precision

If user authentication and encryption key retrieval are performed for every content request, then access control accuracy is improved, but processing time increases

Engineering Contradiction:
Improveaccess control accuracyVSAvoidprocessing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system performs authentication and key retrieval as preliminary actions before content transmission. By checking the HLR and obtaining encryption keys in advance, the system ensures accurate access control while preparing the encrypted content for immediate transmission once authentication succeeds.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8484458B2System and method for secure transmission of media content
Publication Date: 2013.07.09 AT&T MOBILITY II LLC
  • US8484458B2 patent drawing
  • US8484458B2 patent drawing
  • US8484458B2 patent drawing

AI summary

A system that incorporates teachings of the present disclosure may include, for example, a gateway comprising a controller to receive from a communication device a request for media content, receive a key and a record associated with the communications device from an interactive Television (iTV) system, wherein the record comprises a list of entitled media content, determine whether the requested media content is in the list of entitled media content, retrieve the requested media content from the iTV system when the requested media content is determined to be in the list of entitled media content, encrypt the retrieved media content utilizing the key, and transmit the encrypted media content to the communications device. Other embodiments are disclosed.