Methods and apparatus for delivery of packetized content (e.g., video, audio, data, etc.) over a content delivery network. In one embodiment, the content is packetized using an Internet Protocol (IP), and delivered by a service provider over both managed and unmanaged networks to subscribers of the provider, so as to provide delivery at any time, at any location, and via any designated user device. The delivered content may originate from the service provider, third-party content sources (e.g., networks or studios), the subscriber(s) themselves, or other sources including the Internet. Use of a common control and service functions within the network afford the ability to integrate or blend services together, thereby affording the service provider and subscriber new service and economic opportunities. Content delivery sessions may also be migrated from one device to another. A network-based user interface infrastructure, and gateway-based client-side architecture, are also disclosed.

Methods and apparatus for packetized content delivery over a content delivery network

Methods and apparatus for delivering content to a user so as to optimize and enhance the “experience” of the content. In one embodiment, an optimization and monitoring entity (OME) is used which determines, evaluates, and provides notification and/or recommendation of alternative content delivery platforms which are available to a user. The OME receives requests for content forwarded from a content server containing information identifying requesting devices and/or subscriber accounts. The OME examines the capabilities of the registered devices, and identifies/recommends alternative devices based on e.g., video/audio quality, picture size, bandwidth availability, and/or any other additional capabilities of the client devices. A notification is then sent to the client devices indicating which of the user's devices may receive the content alternatively, or in addition to, the requesting device. The notifications may be interactive, allowing the user to select one or more of the devices for delivery.

Apparatus and methods for monitoring and optimizing delivery of content in a network

Recommendation engine apparatus and associated methods provide content compiled from various sources and selected to match user preferences. In one embodiment, the recommendation apparatus comprises a headend entity; in another, it is co-located on a user's CPE. In one embodiment, the recommendation engine creates content records from content metadata for comparison to a user profile. The user profile is pre-programmed; however has the ability to dynamically shift toward a user's preferences as the user takes actions regarding content. Client applications are utilized to compile and present content; feedback mechanisms are utilized to enable “learning” from user activities to generate more precise recommendations as well as to “unlearn” stale preferences. Recommended content is displayed in the form of a playlist, or as a continuous stream on a virtual channel, or presented in an electronic program guide. A business rules “engine” useful in implementing operational or business goals is also disclosed.

Recommendation engine apparatus and methods

Methods and apparatus for control of data and content protection mechanisms across a network using a download delivery paradigm. In one embodiment, conditional access (CA), digital rights management (DRM), and trusted domain (TD) security policies are delivered, configured and enforced with respect to consumer premises equipment (CPE) within a cable television network. A trusted domain is established within the user's premises within which content access, distribution, and reproduction can be controlled remotely by the network operator. The content may be distributed to secure or non-secure “output” domains consistent with the security policies enforced by secure CA, DRM, and TD clients running within the trusted domain. Legacy and retail CPE models are also supported. A network security architecture comprising an authentication proxy (AP), provisioning system (MPS), and conditional access system (CAS) is also disclosed, which can interface with a trusted authority (TA) for cryptographic element management and CPE/user device authentication.

Downloadable security and protection methods and apparatus

Network content delivery apparatus and methods based on content compiled from various sources and particularly selected for a given user. In one embodiment, the network comprises a cable television network, and the content sources include DVR, broadcast, nPVR, and VOD. The user-targeted content is assembled into a playlist, and displayed as a continuous stream on a virtual channel particular to that user. User interfaces accessible through the virtual channel present various functional options, including the selection or exploration of content having similarity or prescribed relationships to other content, and the ability to order purchasable content. An improved electronic program guide is also disclosed which allows a user to start over, record, view, receive information on, “catch up”, and rate content. Apparatus for remote access and configuration of the playlist and virtual channel functions, as well as a business rules “engine” implementing operational or business goals, are also disclosed.

Personal media channel apparatus and methods

An architecture is presented that facilitates integrating memory, security functionalities and near field communication (NFC) capabilities in a mobile device. A memory module is provided that comprises non-volatile memory that stores security software, sensitive data, and keys and a security processor that accesses the security software from the nonvolatile memory and performs security functions based on the security software stored. A NFC radio frequency transmitter and receiver (RF) is directly integrated into the security processor to facilitate NFC capabilities within the secure environment of the memory module. Further, the non-volatile memory directly interfaces to an NFC antenna positioned outside of the memory module via the integrated NFC RF. The integration of the security processor, memory, and NFC RF into the memory module provides a trusted environment for the manipulation and decryption of data received through the NFC antenna.

Near field communication, security and non-volatile memory integrated sub-system for embedded portable applications

An architecture is presented that facilitates secure token generation and transmission capabilities in a mobile device. The system comprises at least one software application that includes a secure token assigned to a specific user and a memory module that communicates with an external processor. A security processor, non-volatile memory component and volatile memory component are integrated to form the memory module that communicates with the external processor. The memory module creates a secure execution environment for the execution of application agents associated with the software application and the secure token. The security processor of the system communicates with the software application and external processor to manage generation, authentication, confidentiality, and transmission of the secure token. And, the non-volatile memory allows the introduction of new tokens and the removal of old tokens.

Solid-state memory-based generation and handling of security authentication tokens

Systems and methods that facilitate the management of digital content in a local environment between a limited number of parties. A digital rights management (DRM) agent-server can be created in hardware in which both the agent-server and agent are trusted. A content owner can send digital content along with a rights attachment indicating a scope of the use rights associated with the content. The content can be accessed by the agent and perceived in a presentation component that will only permit the agent to use the content in accordance with the rights granted as to the content. The DRM agent-server can be implemented by an application-specific integrated circuit (ASIC). Further, the DRM agent-server can be implemented on a portable electronic device such as a cellular phone, a personal digital assistant (PDA), or a laptop computer, for example.

Russell Barck

Papers

Near field communication, security and non-volatile memory integrated sub-system for embedded portable applications

Solid-state memory-based generation and handling of security authentication tokens

Personal digital rights management agent-server