Method for enabling a television user to control operation of application programs on a programmable television controller

[0001] Not Applicable

[0002] Not Applicable

[0003] 1. Field of the Present Invention

[0004] This invention relates generally to the television industry, and specifically to application programs being developed for programmable television controllers.

[0005] 2. Description of the Prior Art

[0006] The television industry is currently experiencing a fundamental technological transition from analog to digital. This transition will undoubtedly yield many exciting new applications and services for television users. It also threatens to diminish television users' control over their experiences in the television mediumwhere they have traditionally been afforded a very high degree of control.

[0007] In contrast to analog television, digital television can be dynamic and interactive. Audiovisual presentations in the digital television medium are intimately interrelated with sophisticated computer programming, data processing and bi-directional digital communications. Digital television users will have increasingly personalized user experiences, driven by technologies that are increasingly mysterious to them.

[0008] The ironic downside of these personalized experiences could be a fundamental loss of control. The World Wide Web has become a compelling example of the ultimate in convenience in a digital medium, juxtaposed with unwanted or bewildering side effects.

[0009] The present invention is offered as a solution to the loss of user control in the digital television environment. Pursuant to offering a sufficient description of the present invention, a comprehensive review of the relevant prior art in the digital television medium is provided herein.

[0010] Digital Television Distributors

[0011] Digital television distributors include digital cable television providers, satellite television providers, and all other subscription-based television service providers, whether wired or wireless. Current examples of digital cable television providers include AT&T-Comcast, Cox, Charter and Time/Warner Broadband. Current examples of satellite television providers include DirecTV and the Dish Network.

[0012] Receiving service from a television distributor requires a specialized terminal device. This terminal device is typically referred to in the industry as a receiver, settop box, or converter box. Television terminal devices were formerly analog in nature, simply receiving and decoding-analog television waveforms. Currently, all new terminal devices being deployed are digital in nature, although they typically contain some analog components.

[0013] Digital terminal devices can receive, decode and process digital bit streams as well as analog waveforms. They are essentially special-purpose personal computersthey can load and execute software applications, transmit data upstream over the distributor's service network, and interface with other digitally networked devices in the home. For the purposes of this document, digital terminal devices will be called programmable television controllers.

[0014] The general concept of a programmable television controller is intended to include any programmable device that has connectivity to the digital television infrastructure, and that has the ability to generate audiovisual presentations and interfaces for a television user. This includes devices such as digital video recorders or home gateway controllers, in addition to digital settop boxes.

[0015] Prior Art FIG. 100 shows a typical television distributor proprietary network (100a). Individual programmable television controllers (100c) each use a communications processor (100e) to connect to a common distributor-subscriber interface (100b), via a bi-directional communications infrastructure (100d).

[0016] A distinct distributor-subscriber interface (100b) exists for each cable television system and for each satellite television uplink. Cable television systems serve anywhere from dozens to hundreds of thousands of subscribers, and are largely based on community or municipal boundaries. Each major satellite television uplink serves millions of subscribers, and is limited geographically only by the extent of the corresponding satellite's footprint.

[0017] The only difference between Prior Art FIG. 100 and Prior Art FIG. 101 is the literal extent of the television distributor proprietary network (100a), and thus the extent, in principle, of the television distributor's right to exercise ownership or control. In Prior Art FIG. 100, the television distributor owns the programmable television controller (100c), having leased or loaned it to the subscriber. In Prior Art FIG. 101, the subscriber owns the programmable television controller (100c), having purchased it from the television distributor or from a retail establishment. Both cases routinely occur in practice.

[0018] Prior Art FIG. 102 shows greater detail for the bi-directional communications infrastructure (100d) deployed by digital television distributors. Television distributors subdivide their communications infrastructure into various segments based on, for example, the frequency or amplitude of signal transmissions.

[0019] Digital television distributors provision most of these segments to carry broadcast downstream communications (102a) or targeted downstream communications (102b) to subscribers. Broadcast downstream communications (102a) are equally accessible to all subscribers, and are selected at will by each subscriber.

[0020] Targeted downstream communications (102b) are specifically addressed to one or more specific programmable television controllers (100c), and are therefore presented or made accessible to the associated subscribers only. The addressing of targeted downstream communications (102b) is based essentially on unique electronic identifiers for each distinct programmable television controller (100c).

[0021] Digital television distributors, with the exception of a few early satellite deployments, also provision upstream communication segments to carry targeted upstream communications (102c) from individual programmable television controllers (100c) to systems or devices beyond the distributor-subscriber interface (10b). With digital cable television technologies, upstream communications segments are provisioned on the same physical cable as downstream communication segments. With satellite television technologies, upstream communications segments typically use subscribers' analog telephone lines, while downstream communications segments use the satellite's one-way broadcast bandwidth.

[0022] The distributor-subscriber interface (100b) provides connectivity between programmable television controllers (100c) and a wide variety of networked resources. Prior Art FIG. 103 is a generalized illustration of these resources, both within the television distributor proprietary network (100a), and beyond in external public or private networks (103g).

[0023] Broadcast streams (103a) are either licensed retransmissions of external broadcast streams (103e) from external broadcast sources (103f), such as CNN, HBO or MTV; or transmissions of distributor broadcast streams (103c) generated locally from distributor broadcast sources (103d), such as community channels or locally inserted advertisements. Both external broadcast streams (103e) and distributor broadcast streams (103c) can be processed or modified prior to broadcast by the television distributor using one or more broadcast stream processing (103b) technologies.

[0024] One or more distributor network interfaces (103i) provide connectivity between the distributor-subscriber interface (100b) for subscriber data communications (103h), the distributor application infrastructure (103k) for distributor data communications (103j), and the external application infrastructure (103n) for external data communications (103m).

[0025] The distributor application infrastructure (103k) covers a wide range of specialized systems including subscriber management systems, conditional access systems, pay-per-view systems, video-on-demand systems, and other systems used for local applications and services, such as interactive program guides.

[0026] The external application infrastructure (103n) is at least as broad as the Internet, and its associated digital assets are at least as comprehensive. Television distributors are keenly interested in controlling connectivity between their subscribers and these external resources. Such control would protect their ability to capitalize on the demand for that connectivity, thus avoiding the dilemma of telephone companieswho carry a great deal of Internet traffic without any direct compensation.

[0027] The most significant opportunities for innovation in the digital television environment apply to digital television distributors, as defined above. While over-the-air broadcast television networks will also be making the transition to digital broadcasting over the next few years, they lack an integrated, upstream communications channel from their viewers. This will prevent them from implementing many new digital television applications and services. Conversely, television distributors possess bidirectional communications capabilities with their subscribers. This will enable them to deploy a wide array of digital applications and services.

[0028] Television Subscribers

[0029] The term subscribersalso referred to herein as users, viewers, or the audiencespecifically includes television users who have entered into a service contract with a television distributor.

[0030] Prior Art FIG. 200 shows a local audience subset's (200a) connectivity with a programmable television controller (100c) at the technical component level. The local audience subset (200a) is comprised of one or more individual television users. The local audience subset (200a) interacts (200b) with the programmable television controller (100c) using a user input device (200c).

[0031] User input devices (200c) in the television environment typically take the form of a handheld remote control, or in some cases a wireless keyboard. Both of these devices send audience interaction data signals (200d) to a user input processor (200e) associated with the programmable television controller (100c), typically using infrared signals.

[0032] At the heart of the programmable television controller (100c) is a program processor (200f), which executes application programs and provides access for the application programs to the communications processor (10e), the user input processor (200e), an internal storage device (200g), and a display processor (200i). One or more conditional access filters (200h) may filter incoming broadcast streams (103a), and transmit the filtered broadcast streams (103a) to the display processor (200i).

[0033] Finally, the display processor (200i) generates display output signals (200j), which are transmitted to a television display device (200k), typically via physical connection cables. The display device (200k) then generates audiovisual presentations and interfaces (200m) for the local audience subset (200a), completing the cycle of interaction.

[0034] Another possible configuration of these components is illustrated in Prior Art FIG. 201, which shows both a programmable television controller (100c) and a display device (200k) contained within an integrated media device (201a).

[0035] Prior Art FIG. 202 shows a common layout of navigation buttons on a television user input device (200c). The directional buttons (202b, 202d, 202c and 202e) move the cursorthe currently active area of the television displayeither up, down, left or right, respectively. The location of the cursor, which is generally indicated by some type of obvious on-screen highlight, determines the resulting action if the Select button (202a) is pressed. The Select button (202a) might also display the caption OK or Enter, and is roughly equivalent to the Enter key on a computer keyboard, or to a computer mouse click (or double-click, depending on the navigation environment). This basic navigation paradigm provides a basis for interactivity in the television environment.

[0036] Prior Art FIG. 203 shows how a programmable television controller (100c) can be connected to a local networked device (203b) at the subscriber's premises via a local communications network (203a). The programmable television controller (100c) uses a communications processor (10e), which is identified as 100e since it may be distinct from the communications processor (10e) shown in Prior Art FIG. 100.

[0037] Possible local networked devices include personal computers, home entertainment components such as video recorders, or any other wired components or appliances. A common futuristic home entertainment scenario has the whole house connected electronically to some incarnation of a home entertainment hub, which for all intents and purposes could be a programmable television controller (100c).

[0038] Prior Art FIG. 204 shows another common method for interacting with a programmable television controller (100c) using a removable storage device (204a) such as a solid-state electronic smart card, or a portable optical or magnetic storage disc. These devices can be inserted or removed (204b) at will, and can be used to do things such as load software applications, verify subscriber identification, facilitate transactions, or store various types of television-related data.

[0039] Prior Art FIG. 205 shows the composition of the local audience superset (205a) from which the local audience subset (200a) can be tallied at any given time. The local audience superset (205a) includes at least one television useran administrative user (205b) that is generally responsible for configuration and maintenance of the programmable television controller. The local audience superset (205a) might also include one or more additional audience members (205b), collectively representing the local non-administrative audience superset (205a).

[0040] The size and composition of a local audience subset (200a) can be very dynamic, sometimes changing from one minute to the next. These seemingly trivial factors assume great importance when attempting to quantify or characterize the universal television audience, which is the combination of all local audience subsets (200a) for a given television program or time period.

[0041] Digital Television Applications and Services

[0042] The traditional television environment provides television users with a high degree of control over their television viewing experiences. Each television subscriber receives a multiplicity of channel broadcasts, each of which can be selected and presented on the subscriber's television, without modification from the distributor's point of transmission. If they wish to view a specific channel, they simply select it. If they do not wish to view a specific channel, they simply select another channel, or turn off the television altogether. Given the qualification that subscribers can choose different packages of channelsor on-demand programswith their subscription, they all have access to precisely the same television content, and they can use it however they please.

[0043] While the growing digital television infrastructure provides a basis for many new applications and services, most of these technologies are in their formative stages. The revolutionary impact of digital technologies in the television environment has yet to be fully experienced. Furthermore, the nature of that impact on the television environmentwhether primarily positive or negativehas yet to be determined. It is currently being left primarily for television distributors to determine, based largely on each new technology application's potential for profitability.

[0044] Most of the new technologies being developed will involve application programs (or simply applications), which are packages of computer code transmitted to and executed on programmable television controllers (100c). Some notable application programs that have the potential to impact television subscribers include television usage monitoring applications (300c), automated content presentation applications (301d), and interactive television applications (302d).

[0045] Television usage monitoring and recording produces valuable audience measurement data that can be aggregated and packaged for sale to media buyers. Television usage data can also be employed in selecting or targeting content for automated content presentation to specific viewers or audiences.

[0046] Interactive icons can be automatically superimposed over standard television presentations, enticing the viewer(s) to click and access interactive information about a program or product. The interactive television environment will support a wide range of information, entertainment, and commerce options for television users.

[0047] Generally, usage monitoring and automated content presentation are being developed specifically to minimize disruption to the traditional viewing experience. In other words, viewers won't necessarily realize the application programs are operating, or that they even exist. This will perpetuate viewers' perceived control over their television viewing experiences, while their actual control could be significantly diminished.

[0048] Conversely, interactive television capabilities will dramatically and intentionally disrupt the television environment. The ability to transmit content requests, user information and other data upstream will connect television users directly and personally to the vast, networked television infrastructure. While this will make great things possible, television users need a basis for protecting themselves, their experiences and their data in this new environment.

[0049] Usage Monitoring

[0050] Programmable television controllers (100c) can be programmed to record extensive details regarding a subscriber's television use and interaction. While these technologies are generally being designed to protect the anonymity of individual subscribers, the fact that usage monitoring can occur at all has raised many red flags with privacy and consumer advocacy groups. These groups argue that television usage monitoring at the subscriber's premises is a clear violation of privacy. The industry in turn argues that these technologies will ultimately enable them to provide a better, more relevant, and more interesting product to television subscribers.

[0051] Privacy, however, is only one important factor in this debatea multi-billion-dollar value chain is involved as well. Advertisers pay for exposure to viewers in the form of advertising fees. Television advertising spending in the U.S. was nearly $50 Billion in 2001. Access to the audience is very valuable. Advertisers and media buyers also spend billions of dollars on audience measurement data that helps them decide when, where and how to advertiseclearly, information about the audience has great value as well. New technologies being developed for the digital television infrastructure will provide unprecedented access to this audience information. In theory, these new technologies should also improve the distribution of value to the parties involved in the value chainwhich includes television users. Further, when asking the question who owns the usage data one very valid answer is television users themselves.

[0052] The audience measurement industry has historically depended on information collected from randomly selected television households, using technologies that are frequently independent from the television distribution infrastructure itself. For example, the term Nielsen household is commonly known to describe a participant in a Nielsen Media Research television audience measurement program. Each of these households has agreed to participate, fills out various consumer-oriented questionnaires for the program, and receives nominal compensation. Further, each of these households has one or more special devices connected to their television sets to measure television usage.

[0053] The information gathered from a relatively small sample of households is projected onto the universal television audience. This projection provides audience size estimates, per pre-defined demographic and behavioral characteristics, for particular television programs or networks/channels. These estimates help advertisers to develop their advertising strategies, and are the primary basis for the valuation of television advertising inventories.

[0054] The permission sought from and compensation provided to the Nielsen households and participants of other such programs acknowledges both the value of their contribution and their ownership of their usage data. It remains to be seen how well these acknowledgements will translate to audience measurement technologies in the digitally networked environment.

[0055] Prior Art FIG. 300 shows a high-level architecture and data flow model for a usage monitoring system that is based on the digital television infrastructure. A usage monitoring application provider (300a) within either a distributor's application infrastructure (103k) or the external application infrastructure (103n) transmits usage monitoring application data (300b) to a program processor (200g) for one or more programmable television controllers (100c). Alternatively, a usage monitoring application program (300c) might be pre-loaded for execution on the programmable television controller (100c), or might be transmitted to a local networked device (203b) for execution.

[0056] The usage monitoring application program (300c) can be configured to monitor and record interaction (200b) of the local audience subset (200a) with the programmable television controller (100c) by essentially tracking audience interaction data signals (200d) transmitted to the programmable television controller (100c) from a user input device (200c). The user input processor (200e) captures and interprets these audience interaction data signals (200d), and transmits data signals representing the resulting passive content selection data (300d), interactive content selection data (300e), or user data (300f) to the usage monitoring application program (300c).

[0057] Further, the usage monitoring application (300c) can be configured monitor and record event data or local device communications (300i) representative of local device usage (300h) for a local networked device (203b) by the local audience subset (200a).

[0058] All data signals processed by or accessible to a programmable television controller (100c) or local networked device (203b) are subject to being monitored and recorded. Once recorded, television usage data (300g) and local device usage data (300j) can be transmitted to the usage monitoring application provider (300a), or to another data aggregation facility in the television application infrastructure (103k or 103n).

[0059] Numerous variations of this general concept are possible. First, as noted, the application infrastructure (103k or 103n) used to deploy and manage usage monitoring application programs (300c), or to store and process their output (300g, 300j), might be deployed and maintained either within a television distributor's proprietary network (10a) or within an external public or private network (103g), as shown in Prior Art FIG. 103.

[0060] Second, a facility with connectivity to the application infrastructure (103k or 103n) might be employed to further aggregate usage monitoring data (300g, 300j) across multiple usage monitoring application providers (300a) and/or data aggregation facilities. Third, data collected by a usage monitoring application program (300c) could be stored or used locally by other application programs in each distinct programmable television controller (100c).

[0061] The architecture specifically depicted in Prior Art FIG. 300 is perhaps best captured in U.S. Pat. No. 6,286,140 (Ivanyi), entitled System and method for measuring and storing information pertaining to television viewer or user behavior. This patent covers the use of a programmable television controller (100c)called a signal receiving device further comprising a monitoring deviceto record on/off, channel change, volume change, mute/unmute and user interactive or non-interactive events. While this patent discusses a centralized system for data collection and analysis, it does not go very far into the potential implications or uses of this information. Instead, it captures the fundamental technologies involved in measuring, storing, aggregating and analyzing television usage data.

[0062] U.S. Pat. No. 5,801,747 (Bedard), entitled Method and apparatus for creating a television viewer profile, describes how television usage data can be used to determine preferred categories of programming and preferred channels of a viewer, and further, how to use that information to locally customize television presentations, such as electronic program guides, to specific viewers.

[0063] U.S. Pat. No. 6,449,632 (David, et al.), entitled Apparatus and method for agent based feedback collection in a data broadcasting network, describes an agent-based system, where individual agents are operative to create a user profile based on activity of . . . one user, and where a user profile subsystem produces an integrated user profile that serves as feedback for a centralized data broadcasting entity.

[0064] U.S. Pat. No. 6,457,010 (Eldering, et al.), entitled Client-server based subscriber characterization system, describes a way to capture television usage data and correlate it with programming characteristic vectors, which are derived from various textual information sources related to the television programming, to form individual subscriber profiles and additional probabilistic information regarding demographics and programming and product interests.

[0065] U.S. Pat. No. 5,497,185 (Dufresne, et al.), entitled Remote control system for television audience data gathering, describes a relatively non-obtrusive method for managing the specification of the current viewing audience for a television receiver. This system assumes willing participation in a particular audience measurement program.

[0066] While the prior art introduces the concept of compensation for electronic survey participants (U.S. Patent Application 20010056374, Joao), it does not offer a specific method for the television user to manage his or her preferences related to such participation. Interestingly, the Joao application, while it potentially offers benefits for television users, appears to be a better solution for advertisers and information gatherersa buyer's market for participation.

[0067] The digital television revolution makes it technologically possible to create a seller's market for participation in audience measurement programs. There is considerable merit to the argument that television usage data, and in particular broadcast (passive) content usage data, is an artifact of a private activity and is therefore property of the user. The argument becomes even stronger if the television user owns the programmable television controller (100c), as shown in Prior Art FIG. 101. Television users need a means for managing and controlling applications that monitor, record, process and distribute their television usage data.

[0068] Automated Content Presentation

[0069] The emerging digital television infrastructure and programmable television controllers (100c) also make it possible to distribute and present television content in many new ways. Locally automated presentation of television content, either generic or targeted to specific local audience subsets (200a), is a significant deviation from traditional television programming distribution models.

[0070] In the traditional television environment, a minimum two-stage selection process determines what content is presented to specific local audience subsets (200a). The television industry drives the first stage of the selection process. Programming providers decide what programming to offer, and distributors in turn decide which programming provider offerings to distribute to their subscribers. Local television audiences (200a) drive the second stage of the selection process. If they tune to a particular program, it is presented on their television; otherwise, it is not. The most notable common exception to this is the automatic tuning of a television receiver to a specific channel when the receiver is first powered up. Needless to say, that specific channel occupies a powerful position in a television distributor's channel lineup, and therefore almost always carries local, subscriber-related or service-related programming.

[0071] With automated content presentation, the second, audience-driven stage of the selection process is eliminated, although the usage data for a particular local television audience (200a) can be employed indirectly in selecting content for automated presentation. Even with that tenuous connection, the automated presentation of television content is still driven by a set of top-down business rules that specify what content should be presented to a local television audience (200a) with a particular usage pattern.

[0072] It is important to distinguish automated content presentation from interactive content presentation. With interactive content presentation, content is distributed or presented to a specific local television audience (200a) based on their explicit request, such as the presentation of a specific web page when a user selects a hyperlink. With automated content presentation, content is presented without any explicit request, such as the presentation of a pop-up web advertisement.

[0073] In the television environment, the advertising-supported programming model is facilitated by an established and accepted system of advertising availsspecific time slots for each ad-supported network where advertisements can be inserted. There are certainly fuzzy limits to the acceptable frequency and duration of advertising insertions, beyond which audiences will be less inclined to tune into a particular network or program. It is reasonable to expect that audiences will not object to automated content presentation within the existing structure of television advertising avails. It remains to be seen whether programmers and distributors will attempt to go beyond traditional boundaries, and how far beyond they will attempt to go, in their automated delivery of content to subscribers.

[0074] Prior Art FIG. 301 shows a high-level architecture and data flow model for an automated content presentation system that is based on the digital television infrastructure. An automated presentation application provider (301a) within either a distributor's application infrastructure (103k) or the external application infrastructure (103n) transmits automated presentation application data (301b) or automated presentation content data (301c) to one or more programmable television controllers (100c). Alternatively, an automated presentation application program (301d) might be pre-loaded for execution on the programmable television controller (100c), or might be transmitted to a local networked device (203b) for execution.

[0075] The automated presentation application program (301d) can automatically select and transmit automated presentation content data (301c) to the display processor (200i), along with command and control data (301e) that causes the display processor (200i) to generate display output signals (200j), as prescribed by the automated presentation application program (301d), for a television display device (200k) that generates audiovisual presentations and interfaces (200m) for the local audience subset (200a).

[0076] Alternatively, the automated presentation application program (301d) can automatically select and transmit automated presentation content data (301c) to a local networked device (203b), along with command and control data (301e) that causes the local networked device to generate automated presentations (301g) for the local audience subset (200a) as prescribed by the automated presentation application program (301d).

[0077] The automated presentation application program (301d) might also transmit automated presentation event data (301f), representative of actual automated presentation histories, back to the automated presentation application provider (301a), or to another data aggregation facility within the application infrastructure (103k, 103n).

[0078] As with Prior Art FIG. 300, there are numerous variations of this general concept. Most notably, the application infrastructure (103k, 103n) used to deploy and manage automated presentation application programs (301d) or automated presentation content data (301c), might be deployed and maintained either within a television distributor's proprietary network (100a) or within an external public or private network (103g), as shown in Prior Art FIG. 103.

[0079] Automated content presentation can be reasonably divided into two distinct sub-categories: 1) automated programming selection, and 2) automated programming customization. Automated programming selection involves unsolicited presentation of programming to the local audience subset (200a). Automated programming customization involves unsolicited local modification of broadcast streams (103a, 103a) by the display processor (200i).

[0080] Both of these technical sub-categories are well understood in the prior art, and have even seen modest commercial deployment. For example, Wink Communications has deployed a system for automated programming customization, where customization comprises the local superimposition of an interactive icon (an example of 301c) over a broadcast programming stream (an example of 103a or 103a). Each local audience subset (200a) then has the ability to select the interactive icon to access more information about the current program or advertised product. Nearly a dozen companies have developed technologies for automated programming selection.

[0081] U.S. Pat. No. 5,995,134 (Hayashi), entitled Method and apparatus for enticing a passive television viewer by automatically playing promotional presentations of selectable options in response to the viewer's inactivity, is an excellent example of automated content presentation technology. In its description of the prior art, it states, Interactive systems are useful for those users that will take advantage of them. However, there are those users who will not actively engage their televisions . . . In such cases, it would be desirable to entice the viewers to take part in the interactive experience (i.e., to purchase or select the selections provided by the interactive systems).

[0082] U.S. Pat. No. 6,308,327 (Liu, et al.), entitled Method and apparatus for integrated real-time interactive content insertion and monitoring in E-commerce enabled interactive digital TV, describes an automated programming customization technology from the programmer's perspective. The patent does not discuss or contemplate the issue of subscriber permission regarding programming customization, but appears to assume that all viewers will readily accept the customization of broadcast television programs as described.

[0083] U.S. Pat. No. 6,460,180 (Park, et al.), entitled Enabling and/or disabling selected types of broadcast triggers, describes a system for automated content customization, where broadcast television programming is locally customized with interactive triggers, based on rules stored in the television receiver. The patent states The loading of these rules occurs automatically and is out of the control of the viewer. The rules, once loaded, preferably are not alterable by the viewer.

[0084] U.S. Pat. No. 5,757,417 (Aras, et al.), entitled Method and apparatus for screening audio-visual materials presented to a subscriber, and U.S. Pat. No. 5,758,258 (Shoff, et al.), entitled Selective delivery of programming for interactive televideo system, both offer a means for subscribers to filter broadcast programming based on the current audience, and based on attributes such as ratings or programming characteristics. These patents offer a reductive filtering mechanism for the screening and selection of broadcast content, but do not offer a means for controlling unsolicited, automated or targeted content presentation.

[0085] As acknowledged in the Hayashi patent, there are those users who will not actively engage their televisions . . . Not all television users will be interested in the interactive triggers that can be superimposed over their favorite television programs. Some users may not wish to have content selected for them in any manner. And certainly many television users would strongly object to more intrusive practices in the television environment, akin to the pop-up advertisements that have become prevalent on the Internet. Television users need a means to maintain their current control over the second stage of the television programming selection process. Television users need a means to control automated content presentation.

[0086] Interactive Television

[0087] Finally, bi-directional communications and the internetworking of the digital television infrastructure will provide television users with unparalleled interactive opportunities and experiences. Television users will be able to request content and information on-demand, become more directly involved with television programs or programming providers, and purchase products or services over their television.

[0088] Interactive television functions essentially like the World Wide Web. Content is delivered to users on-demand, and virtually any type of relationship can be formed and maintained electronically. Perhaps the most significant difference with interactive television is the amazing persuasive power and emotional capacity of the television medium itself. While advertisers and advertising agencies have become experts at wielding this power, interactive television will further enable them to drive television users toward a purchase or commitment, without ever leaving the medium.

[0089] Prior Art FIG. 302 shows a high-level architecture and data flow model for an interactive television system that is based on the digital television infrastructure. An interactive television application provider (302a) within either a distributor's application infrastructure (103k) or the external application infrastructure (103n) transmits interactive television application data (302b) and interactive television content data (302c) to a programmable television controller (100c). Alternatively, the interactive television application program (302d) could be pre-loaded for execution on the programmable television controller (100c), or loaded on the programmable television controller from a local networked device (203b) or a removable storage device (204a).

[0090] The interactive television application program (302d) transmits interactive television content data (302c) and user forms data (302f) to the display processor (200i), which then generates display output signals (200j) accordingly for a television display device (200k). User forms data (302f) generally describes the nature of user input options for the local audience subset (200a).

[0091] The local audience subset (200a) interacts (200b) with the audiovisual presentations and interfaces (200m) using a user input device (200c) to generate audience interaction data signals (200d). The user input processor (200e) captures and interprets the audience interaction data signals (200d), and transmits the resulting interactive content selection data (302g) or user data (302h) to the interactive television application program (302d).

[0092] The local audience subset (200a), if so inclined, can enter user data including user profile data (302j), identification data (302k) and transaction data (302m)into user data forms within the interactive television presentation. The interactive television application program (302d) then transmits the appropriate interactive television requests (302i), user profile data (302j), identification data (302k) or transaction data (302m) to the interactive television application provider (302a), or to another data aggregation facility within the application infrastructure (103k, 103n). The interactive television application provider in turn responds with additional application and content data (302b, 302c) as requested, and further fulfills any transactions, products or services requested by the local audience subset (200a).

[0093] Interactive television has become well established with the widespread deployment of electronic program guides. Electronic program guide providers have aggressively sought to establish their application interface as the primary access point to the interactive television environmentand for good reason. Interactive television applications and services could ultimately rival the World Wide Web with regard to quantity of content, and could perhaps surpass it with regard to quality of content. Television distributors would prefer to package navigational access to these vast resources in a way that is dependent upon their proprietary infrastructure.

[0094] Interactive television, while providing television users with many new capabilities, will also expose television users to many new risks. For example, interactive television application providers can interpret the law as loosely as possible with regard to their use or redistribution of television user data. Further, it is certainly possible that not all interactive television application providers will wield the persuasive power of the mediumor conduct their related business activitiesin a responsible or considerate fashion.

[0095] Ideally, the digital television environment will seek to improve upon existing electronic commerce capabilities and interactive media environments. Television users need a means to protect themselves, further their interests, and control their personal data in the digital television environment. As the present invention will show, television offers an ideal environment for the purposeful assembly of its users, in the interest of meeting these objectives.

[0096] The primary objective of the present invention is to provide television users with a means to control the new technologies being developed for the digital television infrastructure, and with a means to protect themselves from predatory or intrusive applications of those technologies. A secondary objective of the current invention is to firmly anchor television users in the television value chain, positioning them to derive concrete benefits and conveniences from the deployment and use of these new technologies.

[0097] The present invention offers a solution that recognizes the revolutionary nature of this challenge. The ability to transmit data upstream through the television infrastructurewhether that data comprises measurements, content requests, or transactionsintegrates television users directly into the decades-old television distribution infrastructure and its numerous billion-dollar value chains. Television users can no longer be perceived or treated as statistics or assets; they must be embraced as active parties and participants in the television marketplace. The television industry is in the process of acquiring 100 million new asset sourcesspecifically, each of its subscribers.

[0098] As active parties and participants, television users need a means to establish and protect their preferences and interests in this new electronic marketplace. The present invention provides television users with that means, in the form of a television control application that television users alone have the rights to selectively configure. In that form, the present invention holds an undisputable advantage over much of the prior art, which has evolved primarily to facilitate control for the television industry and its commercial interests, rather than for the television audience.

[0099] The present invention enables television users to control their participation in audience measurement programs developed for programmable television controllers. It enables television users to control automated content presentation. It also enables them to collect compensation, in the form of incentives, for their participation in audience measurement programs, or for their permission to view automated content presentations. Finally, it provides television users with a means to assemble, creating a powerful, universal foundation for negotiation in the digital television marketplace. On this foundation, television users can build an arsenal of protective technologies, and practical and legal guidelines for their engagement, entertainment and commerce.

[0100] With regard to usage monitoring in particular, the television industry currently faces a very difficult battle in attempting to satisfy consumer advocacy and privacy groups. The result of this battle could be a compromise that ultimately limits the potential of these new technologies. The present invention produces a legitimate, consensual marketplace for the new commodities that will emerge from the digital television infrastructuredetailed audience data, television users' permissions, and television users' patronage.

[0101] By providing users with a solid basis from which to control these new commoditiesfor which they are the source of supplythe present invention eliminates many thorny issues. Television distributors and content providers can then commence their efforts to build subscriber bases for digital television applications and services, as they have done successfully for many other services in the past.

[0102] Television distributors can benefit from the present invention as well. For example, if implemented properly, it could strategically position television distributors to control the audience measurement industryone of television's multi-billion-dollar industries. For a number of reasons that should become apparent to the reader, television distributors are ideally suited to implement the present invention.

[0103] While implementation of the present invention may seem ambitious, in reality it could be very straightforward and require little in the way of development capital and infrastructure. The most significant challenges involve gaining the support of television distributors, or alternatively pursuing a consumer-rights-oriented strategy.

[0104] Further objects and advantages of the present invention will become apparent from a consideration of the drawings and ensuing description.

[0105] FIGS. 1-23 collectively show one potential embodiment of a TV Control application interface for a programmable television controller. Please note that lower-case letter L is skipped in the sequence of reference numerals for each drawing, to avoid confusion with the number 1 (one).

[0106] FIG. 1 is an interface for specifying the audience setup mode of the programmable television controller.

[0107] FIG. 1 is a description of functionality for the interface shown in FIG. 1.

[0108] FIG. 2 is an interface for accessing common audience control options or individual user control options for the programmable television controller.

[0109] FIG. 2 is a description of functionality for the interface shown in FIG. 2.

[0110] FIG. 3 is an interface for identifying and specifying individual users of the programmable television controller.

[0111] FIG. 3 is a description of functionality for the interface shown in FIG. 3.

[0112] FIG. 4 is an interface for specifying individual user login information.

[0113] FIG. 4 is a description of functionality for the interface shown in FIG. 4.

[0114] FIG. 5 is an interface for selectively configuring usage monitoring control options.

[0115] FIG. 5 is a description of functionality for the interface shown in FIG. 5.

[0116] FIG. 6 is an interface for selectively configuring interactive icon control options.

[0117] FIG. 6 is a description of functionality for the interface shown in FIG. 6.

[0118] FIG. 7 is an interface for selecting a type of usage monitoring exception.

[0119] FIG. 7 is a description of functionality for the interface shown in FIG. 7.

[0120] FIG. 8 is an interface for selecting a type of interactive icon exception.

[0121] FIG. 8 is a description of functionality for the interface shown in FIG. 8.

[0122] FIG. 9 is an interface for specifying usage monitoring network exceptions.

[0123] FIG. 9 is a description of functionality for the interface shown in FIG. 9.

[0124] FIG. 10 is an interface for specifying interactive icon network exceptions.

[0125] FIG. 10 is a description of functionality for the interface shown in FIG. 10.

[0126] FIG. 11 is an interface for specifying usage monitoring schedule exceptions.

[0127] FIG. 11 is a description of functionality for the interface shown in FIG. 11.

[0128] FIG. 12 is an interface for specifying interactive icon schedule.

[0129] FIG. 12 is a description of functionality for the interface shown in FIG. 12.

[0130] FIG. 13 is an interface for specifying schedule exception details.

[0131] FIG. 13 is a description of functionality for the interface shown in FIG. 13.

[0132] FIG. 14 is an interface for selectively configuring targeted content control options.

[0133] FIG. 14 is a description of functionality for the interface shown in FIG. 14.

[0134] FIG. 15 is an interface for selectively configuring user data distribution control options.

[0135] FIG. 15 is a description of functionality for the interface shown in FIG. 15.

[0136] FIG. 16 is an interface for specifying user identification data for the audience or users of the programmable television controller.

[0137] FIG. 16 is a description of functionality for the interface shown in FIG. 16.

[0138] FIG. 17 is an interface for specifying user profile data for the audience or users of the programmable television controller.

[0139] FIG. 17 is a description of functionality for the interface shown in FIG. 17.

[0140] FIG. 18 is an interface for specifying user credit card data.

[0141] FIG. 18 is a description of functionality for the interface shown in FIG. 18.

[0142] FIG. 19 is an interface for authorizing distribution of user data objects, which causes generation of data claims.

[0143] FIG. 19 is a description of functionality for the interface shown in FIG. 19.

[0144] FIG. 20 is an interface for selectively configuring networked device control options.

[0145] FIG. 20 is a description of functionality for the interface shown in FIG. 20.

[0146] FIG. 21 is an interface for selectively configuring application authorization control options.

[0147] FIG. 21 is a description of functionality for the interface shown in FIG. 21.

[0148] FIG. 22 is an interface for authorizing application programs from specific application providers.

[0149] FIG. 22 is a description of functionality for the interface shown in FIG. 22.

[0150] FIG. 23 is an interface for authorizing specific application programs.

[0151] FIG. 23 is a description of functionality for the interface shown in FIG. 23.

[0152] FIGS. 50-59 collectively show one potential embodiment of an integrated TV Control management application interface for use by an audience registry. The illustrated embodiment assumes that the audience registry is a television distributor. Please note that lower-case letter L is skipped in the sequence of reference numerals for each drawing, to avoid confusion with the number 1 (one).

[0153] FIG. 50 is a top-level menu interface for accessing TV Control management utilities and data.

[0154] FIG. 50 is a description of functionality for the interface shown in FIG. 50.

[0155] FIG. 51 is an interface for accessing TV Control installation and user registration utilities and data.

[0156] FIG. 51 is a description of functionality for the interface shown in FIG. 51.

[0157] FIG. 52 is an interface for accessing TV Control option pool data and collection utilities.

[0158] FIG. 52 is a description of functionality for the interface shown in FIG. 52.

[0159] FIG. 53 is an interface for accessing specific TV Control option pools.

[0160] FIG. 53 is a description of functionality for the interface shown in FIG. 53.

[0161] FIG. 54 is an interface for accessing subscriber incentive program utilities and data.

[0162] FIG. 54 is a description of functionality for the interface shown in FIG. 54.

[0163] FIG. 55 is an interface for accessing incentive program setup for specific incentive programs.

[0164] FIG. 55 is a description of functionality for the interface shown in FIG. 55.

[0165] FIG. 56 is an interface for accessing user selection list utilities and data.

[0166] FIG. 56 is a description of functionality for the interface shown in FIG. 56.

[0167] FIG. 57 is an interface for managing commercial registrations.

[0168] FIG. 57 is a description of functionality for the interface shown in FIG. 57.

[0169] FIG. 58 is an interface for managing application program certification.

[0170] FIG. 58 is a description of functionality for the interface shown in FIG. 58.

[0171] FIG. 59 is an interface for managing data claim authentication, user data distribution, and data distribution reporting.

[0172] FIG. 59 is a description of functionality for the interface shown in FIG. 59.

[0173] Prior Art FIGS. 100-103 show television distributor-centric prior art for the digital television infrastructure. Please note that lower-case letter L is skipped in the sequence of reference numerals for each drawing, to avoid confusion with the number 1 (one).

[0174] Prior Art FIG. 100 shows a typical television distributor proprietary network, where the television distributor owns the programmable television controllers.

[0175] Prior Art FIG. 101 shows a typical television distributor proprietary network, where the television subscribers own the programmable television controllers.

[0176] Prior Art FIG. 102 shows detail of a typical bidirectional communications infrastructure implemented by television distributors.

[0177] Prior Art FIG. 103 shows connectivity between the distributor-subscriber interface and resources both in a television distributor proprietary network and in external public or private networks.

[0178] Prior Art FIGS. 200-205 show television subscriber-centric prior art for the digital television infrastructure. Please note that lower-case letter L is skipped in the sequence of reference numerals for each drawing, to avoid confusion with the number 1 (one).

[0179] Prior Art FIG. 200 shows interaction between a local television audience and a programmable television controller at the technical component level.

[0180] Prior Art FIG. 201 shows an integrated media device.

[0181] Prior Art FIG. 202 shows a typical button layout for a television user input device.

[0182] Prior Art FIG. 203 shows connectivity between a programmable television controller and a local networked device.

[0183] Prior Art FIG. 204 shows insertion or removal of a removable storage device with respect to a programmable television controller.

[0184] Prior Art FIG. 205 shows a local audience superset, from which a local audience subset can be tallied at any given time.

[0185] Prior Art FIGS. 300-302 show high-level architecture for three specific prior art technology applications for the digital television infrastructure. Please note that lower-case letter L is skipped in the sequence of reference numerals for each drawing, to avoid confusion with the number 1 (one).

[0186] Prior Art FIG. 300 shows high-level architecture for a usage monitoring system based on the digital television infrastructure.

[0187] Prior Art FIG. 301 shows high-level architecture for an automated presentation system based on the digital television infrastructure.

[0188] Prior Art FIG. 302 shows high-level architecture for an interactive television system based on the digital television infrastructure.

[0189] FIGS. 400-408 show high-level architecture for various aspects and embodiments of the present invention. Please note that lower-case letter L is skipped in the sequence of reference numerals for each drawing, to avoid confusion with the number 1 (one).

[0190] FIG. 400 shows high-level architecture for a TV Control system, where adapted application programs voluntarily access and comply with control option specifications at the local level.

[0191] FIG. 401 shows high-level architecture for a TV Control system, where the TV Control application enforces compliance of application programs at the local level.

[0192] FIG. 402 shows high-level architecture for a TV Control system, where application providers certify applications for compliance prior to transmitting the applications to the programmable television controller.

[0193] FIG. 403 shows high-level architecture for a TV Control system, where application providers acquire a commercial registration prior to transmitting compliant applications to the programmable television controller.

[0194] FIG. 404 shows high-level architecture for a TV Control system, where control options from a plurality of programmable television controllers are collected at a central collection site, and communicated directly to application programs.

[0195] FIG. 405 shows high-level architecture for a TV Control system, where control options from a plurality of programmable television controllers are collected at a central site, and communicated to application program providers.

[0196] FIG. 406 shows high-level architecture for a TV Control system, where control options from a plurality of central collection sites are aggregated at a central aggregation site, and communicated directly to application programs.

[0197] FIG. 407 shows high-level architecture for a TV Control system, where control options from a plurality of central collection sites are aggregated at a central aggregation site, and communicated to application program providers.

[0198] FIG. 408 shows high-level architecture for a TV Control application used in conjunction with a central registration site to authorize and control the distribution of user data objects, by using data claims.

[0199] FIGS. 500-516 show operational flowcharts for various aspects and embodiments of the present invention. Please note that lower-case letter L is skipped in the sequence of reference numerals for each drawing, to avoid confusion with the number 1 (one).

[0200] FIG. 500 shows a flowchart for a TV Control system's simplest operational scenario, where adapted application programs voluntarily access and comply with control option specifications at the local level. Connectors (depicted as encircled reference numerals) link this scenario to other flowcharts detailing more complex operational scenarios.

[0201] FIG. 501 shows a flowchart for forced compliance of application programs by the TV Control application at the local level, and links to FIG. 500.

[0202] FIG. 502 shows a flowchart for integration of an incentive program with the TV Control application, and links to FIG. 500.

[0203] FIG. 503 shows a flowchart for certification of application programs that demonstrate compliant operation with TV Control applications, and links to FIGS. 500, 505 and 506.

[0204] FIG. 504 shows a flowchart for commercial registration of application program providers, which consequently commit to adapt their application programs to be compliant with TV Control applications, and links to FIGS. 500, 505 and 506.

[0205] FIG. 505 shows a flowchart for collection of control option specifications at a central collection site, and subsequent communication to application programs. This flowchart links to FIGS. 500, 503, 504, 506 and 508.

[0206] FIG. 506 shows a flowchart for aggregation of control option specifications at a central aggregation site, and subsequent communication to application programs. This flowchart links to FIGS. 500, 503, 504 and 509.

[0207] FIG. 507 shows a flowchart for communication of control option specification data from a user storage means to an application provider, which subsequently configures an application program to be compliant with the control option specification. This flowchart links to FIGS. 500, 508 and 509.

[0208] FIG. 508 shows a flowchart for communication of control option specification data from a collection storage means to an application provider, which subsequently configures an application program to be compliant with the control option specification. This flowchart links to FIGS. 500, 505 and 507.

[0209] FIG. 509 shows a flowchart for communication of control option specification data from an aggregation storage means to an application provider, which subsequently configures an application program to be compliant with the control option specification. This flowchart links to FIGS. 500, 506 and 507.

[0210] FIG. 510 shows a flowchart for registration of a television user by a central registration provider, and establishment of a data claim authorization means. This flowchart operates in conjunction with FIG. 511 to describe a complete data claim processing scenario.

[0211] FIG. 511 shows a flowchart for the authorization, generation, validation and fulfillment of data claims. This flowchart operates in conjunction with FIG. 510 to describe a complete data claim processing system.

[0212] FIG. 512 shows a flowchart for a television user's selective configuration of distribution terms options for the distribution of user data. This flowchart links to FIG. 510.

[0213] FIG. 513 shows a flowchart for reporting the results of data claim authentication to the television user, and links to FIG. 511.

[0214] FIG. 514 shows a flowchart for reporting the results of data claim processing to the television user, and links to FIG. 511.

[0215] FIG. 515 shows a flowchart for the registration of application agents for the purposes of data claim processing efficiency, and links to FIGS. 510 and 516.

[0216] FIG. 516 shows a flowchart for the specialized processing of data claims presented by a registered application agent, and links to FIGS. 510 and 516.

[0217] The present invention is a system and method for providing television users with control over digital television applications and services. Television users exercise this control by using a TV Control application (400a) to selectively configure one or more control options (400b) that pertain to the operation of application programs on the programmable television controller (100c).

[0218] In the illustrated embodiment, the TV Control application (400a) is loaded and executed on a television user's programmable television controller (100c), in conjunction with data from a specific television distributor (100a). It captures the television user's (400c) selective configuration (400d) of the control options (400b), and then stores the selective configuration as a control option specification (400e). The control option specification (400e) represents the television user's preferences for participation and commerce in the digital television environment.

[0219] The control option specifications (400e) can be uploaded to or collected by a central collection site (404a) and further aggregated by a central aggregation site (406a). Further, specific user data objects (408d) can be uploaded to a central registration site (408a) for controlled and protected distribution to application agents (408f) who present authentic data claims (408i). These centralized facilities are each an incarnation of an audience registry, and may be combined in a single audience registry. An audience registry offers a great deal more than mere convenience for consumers By aggregating assets from hundreds or even thousands of television users, an audience registry becomes an ideal platform for effectively concentrating the power and influence of its registered consumers, for their collective benefit.

[0220] Compliance with control option specifications (400e) can be achieved in a variety of ways. In the ideal scenario, application program providers voluntarily adapt their application programs (300c, 301d, 302d) to be compliant with control option specifications (400e). If necessary, however, the TV Control application (400a) can be adapted to monitor application event data (401a) for non-compliant application events, and then block or even terminate non-compliant application programs accordingly.

[0221] Other mechanisms can be used to ensure compliance as well, such as providing compliance certificates (402e) to application programs that demonstrate compliant operation, or providing commercial registrations (403i) to application program providers that promise to make their applications compliant. This can be achieved through a centralized service bureau (402a, 403a) which in theory could also function as an audience registry.

[0222] Finally, the TV Control application (400a) offers television users (400c) a means to control or limit what interactive television applications (302d), or agents of those applications (408f), can do with user data objects (408d). Television users (400c) may wish to provide personal or proprietary user data objects (408d) to perform transactions or to participate in interactive environments. Data claims (408i) enable television users protection for these data objects.

[0223] Instead of providing user data explicitly to interactive television application programs (302d), television users authorize the generation of data claims (408i) for specially-adapted interactive television application programs (302d). Data claims (408i) entitle the application (or an application agent) to acquire specific data objects from a central registration site (408a) that houses the data objects, but only after accepting the television user's terms (408j) for use and re-distribution of the data objects. Data claims are, in essence, a privacy policy in reverse.

[0224] The most straightforward way to describe the TV Control concept is to provide an example of a TV Control application interface as it would appear for the television user. The following description represents one potential embodiment of this application interface. It should be apparent to the reader that many additional types of functionality could be incorporated into this interface, while still maintaining the general objective of providing television users with a means to control digital television applications.

[0225] Application Interfaces

[0226] FIGS. 1-23 each show one screen for a possible embodiment of the TV Control application interface. FIGS. 50-59 each show one screen for a possible embodiment of an integrated management application interface, which would be used by an audience registry. The illustrated embodiment of the integrated management application interface applies specifically to a television distributor acting as an audience registry. However, an independent audience registry could provide much of the functionality in the illustrated embodiment as well.

[0227] FIGS. 1-23 and FIGS. 50-59 are tables describing the functionality for the screens shown in FIGS. 1-23 and FIGS. 50-59, respectively. These tables are not referenced explicitly in the following description, but their most important information content is captured in the discussion of each screen's functionality.

[0228] Each screen contains multiple selectable areas. For the integrated management application interface (FIGS. 50-59), the method of navigation between distinct selectable areas is not particularly important, given the flexibility of navigation and input strategies in a strictly computer-based environment. The selectable areas on these screens serve primarily as outline categories for the functionality present in illustrated embodiment of the management application.

[0229] For the TV Control application interface (FIGS. 1-23), the method of navigation warrants a bit more explanation. It is assumed for the purposes of the illustrated embodiment that the TV Control application exists in the form of an interactive television application (see FIG. 302). Therefore, the television user (400c) would interact directly with a programmable television controller (100c) to selectively configure control options (400b), or to submit user data objects (408d).

[0230] The TV Control application interface will distinguish one and only one selectable area at a time with some type of conspicuous highlight on the television display device (200f). This highlighted selectable area is known as the cursor location. The cursor location determines the resulting action if a television user presses the SELECT button (202a) on the television input device (200c) for the programmable television controller (100c) running the TV Control application (400a).

[0231] In the following description, pressing the SELECT button (202a) is referred to as selecting the current cursor location. Results of selection within the TV Control application interface are described in further detail for each selectable area in the tables of FIGS. 1-23. Those descriptions serve also to link individual screens together to form a navigational structure for the TV Control application interface.

[0232] Further, the directional buttons (202b, 202c, 202d, 202e) on the television input device (200c) are used to move between the selectable areas on each TV Control application interface screen. While the results of pressing each directional button have not been specifically defined for each selectable area, it is very straightforward to conceive of a standard navigational behavior pattern for the directional buttons within each TV Control application interface screen.

[0233] It is not essential that the TV Control application be implemented as an interactive television application (302d), however. Any interactive electronic medium, such as the Internet, will suffice. The TV Control application could even conceivably be implemented using paper forms, in conjunction with some type of service bureau that collected and logged the forms data. The medium is not important, provided that the television user can selectively configure the control options, and provided that control option specification data can be communicated, directly or indirectly, to digital television application programs.

[0234] TV Control Application Interface

[0235] The embodiment of the TV Control application interface shown in FIGS. 1-23 includes six control option categoriesbroadcast content usage monitoring, superimposition of interactive icons, content targeting, distribution of user data, networked device access, and application authorization. Each of these categories can be enforced or controlled to some extent by television distributors and hence would not require an aggressive compliance strategy.

[0236] The TV Control application (400a) could be accessed by a television user (400c) in the local audience subset (200a) on-demand in a variety of ways. An icon for accessing the TV Control application interface could be embedded in an electronic program guide, or in another interactive walled garden environment provided by a television distributor. Alternatively, the TV Control application (400a) could be associated with a particular tuner location (i.e. channel 1), or associated with a specific button on a television input device (200c).

[0237] There are also multiple options for closing and exiting the TV Control application (400a). In addition to using the navigation provided in the interface itself, it is possible to associate an EXIT button or similar button on the television input device (200c) with the request to exit the application. For that reason, the TV Control application (400a) is programmed to capture and save user selections with every user input event, versus buffering data and saving it collectively at a later time.

[0238] FIG. 1TV Setup shows a screen for configuring the TV Control application (400a) to capture and store either common audience preferences (1e) or individual user preferences (1f). The configuration is achieved in this embodiment using mutually exclusive radio button selections (1c and 1d; collectively 1b). Selection of the common audience preferences option (1c, 1e) makes the local audience subset (200a) eligible for basic incentives (1g). Selection of the individual user preferences option (1d, If) makes each individual television user (200a) eligible for premium incentives (1h).

[0239] To accumulate incentives, television users (400c) must specifically choose to participate in activities that are connected to incentive programs. For example, in the illustrated embodiment, the television user (400c) could participate in a usage monitoring program (FIG. 5). Selection of individual user preferences (If) warrants premium incentives (1h) due primarily to the increased value of usage data (300g) or local device usage data (300j) when the local audience subset (200a) has been specified per individual user (FIG. 3), and where each individual television user (400c) has created a user profile (FIG. 17).

[0240] The effort involved for the local audience subset (200a) is more substantial for the individual user preferences option (if). In this scenario, each distinct television user (400c) must specify his or her own preferences (FIG. 2). When multiple television users (400c) are identified as being present in the local audience subset (200a), the TV Control application (400a) could implement the most restrictive preferences specified among the individual television users (400c) present in the local audience subset (200a).

[0241] Further, when participating in a usage monitoring program with individual user preferences (1f), the local audience subset (200a) is required to periodically specify which television users (400c) are present (FIG. 3) to receive premium rewards. This can be accomplished, for example, with the superimposition of an interactive icon at the beginning of each new television program or time period, which when selected will access the screen shown in FIG. 3. This functionality either could be integrated with a usage monitoring application (300c) transmitted to the programmable television controller (100c), or an ongoing record of audience members could be captured by the TV Control Application (400a) and subsequently exported to the usage monitoring system. The level of effort involved for the local audience subset (200a) is reasonable when compared to existing audience measurement programs.

[0242] Conversely, the common audience preferences option (1e) requires no interaction aside from the initial selective configuration (400d) of control options (400b) for the collective local audience subset (200a).

[0243] Finally, the screen shown in FIG. 1 can provide the ability for the local audience subset (200a) to choose an audience registry (1i)a centralized service bureau (404a, 406a, or 408a) that stores, manages and distributes control option specifications (400e) and user data objects (408d) on behalf of television users (400c). Selection of this option (1i) would cause the TV Control application (400a) to display a screen with all audience registries available for the specific programmable television controller (100c). In the illustrated embodiment, a television distributor acts as the audience registry.

[0244] A television user (400c) might choose a particular audience registry because they prefer the registry's policies for commercial entities regarding data distribution (408j), or because the registry has a good reputation with other television users. A television distributor makes a potentially ideal candidate for an audience registry, although the concept might be implemented in its purest sense as an independent, not-for-profit entity.

[0245] Selection of an audience registry would ideally trigger an automated electronic registration process for the TV Control application (400a). Registration could be offered as an option; however, the TV Control application (400a) derives a great deal of its utility and effectiveness through registration and the subsequent aggregation of control option specifications (400e) and user data objects (408d).

[0246] The screen shown in FIG. 1 is the first screen displayed during initial setup of a TV Control application (400a) for a specific programmable television controller (100c). Selection of the OK button (1a) would trigger display of the screen shown in FIG. 2 (for selection 1c) or the screen shown in FIG. 3 (for selection 1d). Selection of the Help button (1j) would trigger display of a screen explaining how to use the TV Setup screen (FIG. 1).

[0247] Once the main selection (1b) has been made, the entry point to the TV Control application (400a) will be the screen shown in FIG. 2 (for selection 1c) or the screen shown in FIG. 3 (for selection 1d). The Controller Setup screen shown in FIG. 1 can subsequently be accessed from the screen shown in FIG. 2 (via 2i).

[0248] If the individual user preferences option (1d) is selected, however, one specific user could be identified in the TV Control application interface as the administrator (as shown in FIG. 4), where only the administrator will have access to the screen shown in FIG. 1, via the screen shown in FIG. 2. This access could be limited based on username/password confirmation.

[0249] If the audience/administrator switches from individual user preferences (1d) to common audience preferences (1c), the TV Control application (400a) could save any control option specifications (400e) or user data objects (408d) that had been previously entered for individual television users (400c), in case of a subsequent switch back to individual user preferences (1d).

[0250] FIG. 2Control Options Menu shows a screen for accessing each of the six control option categories (2b, 2c, 2d, 2e, 2f and 2g) included in the illustrated embodiment of the TV Control application interface. The screen in FIG. 2 could apply either to common audience preferences (1c) or to individual user preferences (1d; access via 3i, 3j, 3k, etc.).

[0251] If the common audience preferences option (1c) has been selected, the screen shown in FIG. 2 is the first screen displayed when the TV Control application (400a) is subsequently accessed on-demand. Selection of the OK button (2a) would cause the user to exit the TV Control application (400a). Selection of the Help button (2j) would trigger display of a screen explaining how to use the Preferences Setup Menu (FIG. 2).

[0252] If the individual user preferences option (1d) has been selected, the screen shown in FIG. 2 can be accessed through the screen shown in FIG. 3, and access would be to the control options for one and only one specific user (3i, 3j, 3k, etc.). This access could be limited based on a username/password confirmation (FIG. 4). Selection of the OK button (2a) would cause the user to return to the screen shown in FIG. 3.

[0253] If an administrator has been specified, access to the screen shown in FIG. 1 (2i) would be presented as an option only for the administrator. Therefore, if any user other than the administrator were to access the screen shown in FIG. 2, they would not see the selectable area identified as 2i.

[0254] The control option category list (2h) in the illustrated embodiment contains only six control option categories (2b, 2c, 2d, 2e, 2f and 2g). It is conceivable, and potentially desirable, to include additional control option categories. Some possible examples include control options for television cookies or interactive content usage monitoring. Each additional control option category would require its own set of control option configuration screens, which would be accessed from the screen shown in FIG. 2. The control option category list display (2h) could include vertical scrolling capability as required for a long list of control option categories.

[0255] FIG. 3User Accounts shows a screen that is accessible only if the individual user preferences option (1d) has been selected. In that scenario, the screen shown in FIG. 3 is the first screen displayed when the TV Control application (400a) is subsequently accessed on-demand, either through one of the typical access scenarios, or in response to a superimposed interactive trigger for participants of a usage monitoring program.

[0256] Selection of the OK button (3a) in the screen shown in FIG. 3 causes the user to exit the application. Selection of the Help button (3n) triggers display of a screen explaining how to use the User Menu (FIG. 3).

[0257] The screen shown in FIG. 3 is used to identify specific users as being present in the audience (check boxes 3c, 3d, and 3e), to access user login setup for each user (3f, 3g, and 3h), or to access individual control options for each user (3i, 3j, and 3k). Access to login setup and control options for each user could be limited based on a username/password confirmation. Access could optionally be provided to the administrator for all individual user accounts. It is possible to identify the current administrator, if one has been specified, by displaying a visible indicator adjacent to a particular user, as shown in 3f.

[0258] It is also possible through this screen to add new user accounts (3b). If a new user account is added, a row of selectable areas corresponding to that new user will subsequently be added to the user account list display (3m). If an existing user account is deleted (FIG. 4, 4g), the row of selectable areas corresponding to that deleted user will subsequently be removed from the user account list display (3m). The user account list display (3m) could include vertical scrolling capability as required for a long list of users.

[0259] FIG. 4User Setup shows a screen for specifying a username and password for a specific user. This screen is accessed when adding a new user (3b), or by selecting the login setup option for an existing user (3f, 3g, and 3h).

[0260] Selecting the username (4b) or password (4c, 4d) data fields on the screen shown in FIG. 4 would display an appropriate form for the entry of the username or password data by the television user (400c). The administrator check box (4e) would be displayed for all users if an administrator is not currently identified, or for the administrator only if an administrator is currently identified.

[0261] The screen shown in FIG. 4 can also be used to delete an existing user (4g) from the user account list shown in FIG. 3. This action could present a confirmation prompt, such as Are you sure you would like to delete <Username> with the option to accept or decline.

[0262] Selection of either the delete button (4gpossibly with confirmation) or the OK button (4a) would cause the user to return to the screen shown in FIG. 3. Selecting the Help button (4f) will trigger display of a screen explaining how to use the User Setup screen (FIG. 4).

[0263] If the TV Control application (400a) is used in conjunction with an audience registry, it is conceivable that individual television users (400c) could be added to the user account list (3m) for multiple programmable television controllers (100c). In this case, it is possible to have individual control option specifications (400e) follow television users (400c) from one programmable television controller (100c) to another.

[0264] In this scenario, the screen shown in FIG. 4 could include an option to query the audience registry for an existing television user's data, or simply to associate the new user with that existing registered user. Choosing this option would require username/password confirmation by the transient user. This could enable individual television users (400c) to safely interact or receive incentives for viewing or participation outside of their primary local audience subset (200a), although this capability might require additional centralized data analysis to recognize potential abuse.

[0265] FIG. 5Usage Monitoring Options shows a screen for selectively configuring usage monitoring control options. This screen is accessed from the usage monitoring options button (2b) on the screen shown in FIG. 2. This screen could apply either to common control options (400b) for the local audience subset (200a), or to the control options (400b) for an individual television user (400c).

[0266] The primary selection on the screen shown in FIG. 5 is embodied in a set of mutually exclusive radio button selections (5b, 5c, and 5d; collectively 5e). The first option (5b) specifies that the audience/user does not wish to have their broadcast content usage monitored under any circumstances. If this option is selected, no usage monitoring application program (300c) may be executed on the audience's/user's programmable television controller (100c).

[0267] The second option (5c) specifies that the audience/user will allow their broadcast content usage to be monitored, but with certain exceptions. These exceptions can be specified by selecting the specify exceptions button (5h). Further, broadcast content usage monitoring with exceptions (5c) may qualify the user for incentives (5f).

[0268] The accrual of incentives in this scenario might be based on the quantity of usage data (300g, 300j) that is produced, given the exceptions specified. It may also be based on the resulting time periods during which usage monitoring is permitted. For example, prime time usage monitoring may carry greater potential incentives than overnight usage monitoring. There are potentially other conceivable means of quantifying the accrual of usage monitoring incentives, given the exceptions specified (see FIG. 502).

[0269] In any case, selection of the second option (5c) would require all usage monitoring application programs (300c) transmitted to the audience's/user's programmable television controller (100c) to observe the specified exceptions (5h).

[0270] The last option (5d) specifies that the audience/user will allow their broadcast content usage to be monitored with no exceptions. This selection would qualify the audience/user for the greatest possible incentives (5g), provided incentive programs are made available. In this scenario, a usage monitoring application program (300c) transmitted to the audience's/user's programmable television controller (100c) is free to monitor broadcast content usage at all times and for all broadcast content sources.

[0271] Selecting the OK button (5a) switches the user to the screen shown in FIG. 2. Selecting the Help button (5i) triggers display of a screen explaining how to use the Usage Monitoring Options screen (FIG. 5).

[0272] The terminology broadcast content usage is used here to distinguish selection of broadcast content from selection of interactive television options. In the former case, broadcast content includes tuning of all broadcast networks, cable networks, local information channels, or pay-per-view selections. In the latter case, a record of the selection is made by default when the request for an interactive option is processed through the digital television infrastructure. This might include video-on-demand, interactive applications, or even Internet access via television.

[0273] Usage monitoring control options are limited to broadcast content usage in the illustrated embodiment to avoid the requirement for an aggressive compliance strategy. The broadcast content usage category is certainly the most sensitive with regard to consumer privacy. Furthermore, usage data for the broadcast content category includes essentially all data that has been tracked by the audience measurement industry to date. This distinction is therefore not as restrictive as it might seem.

[0274] FIG. 6Interactive Icon Options shows a screen for selectively configuring interactive icon control options. This control option category, accessed from the interactive icon options button (2c) on the screen shown in FIG. 2, refers specifically to the automated superimposition of interactive icons. This is a specific sub-category of automated programming customization as described in the automated content presentation section of the prior art description.

[0275] Automated superimposition of interactive icons is implemented by an automated presentation application program (301d) transmitted to a programmable television controller (100c). Such an application is typically configured to detect incoming triggers in broadcast content streams (103a), and to automatically superimpose one or more selectable, interactive icons over the broadcast content programming. Alternatively, interactive icons can be transmitted independently of broadcast content streams (103a), stored in the programmable television controller (100c), and superimposed over broadcast content programming based on specific timing or other criteria.

[0276] In either case, the automated presentation application program (301d) locally customizes the broadcast content programming in real-time on the programmable television controller (100c), producing display output signals (200j) that include a mixture of the original broadcast programming content and the interactive icon(s).

[0277] The primary selection on the screen shown in FIG. 6 is embodied in a set of mutually exclusive radio button selections (6b, 6c, and 6d; collectively 6e). The first option (6b) specifies that the audience/user does not wish to have interactive icons superimposed under any circumstances. If this option is selected, no automated presentation application program (301d) may superimpose interactive icons on the audience's/user's programmable television controller (100c).

[0278] The second option (6c) specifies that the audience/user will allow interactive icons to be superimposed, but with certain exceptionswhich can be specified by selecting the specify exceptions button (6h). Further, allowing superimposition of interactive icons with exceptions (6c) may qualify the user for incentives (6f).

[0279] The accrual of incentives in this scenario might be driven by content providers who wish to distribute interactive content or advertising through existing broadcast networks. For example, ESPN might offer incentives, through television distributors, for television users who allow interactive icons to be superimposed during a sporting event. The broader the audience for these interactive icons, the more ESPN can charge content providers for the distribution of the interactive icons. It is also possible that no incentives are offered for this control option category, but rather that the relevance and/or depth of interactive content constitute the incentives for the user.

[0280] In any case, selection of the second option (6c) would require all automated presentation application programs (301d) transmitted to the audience's/user's programmable television controller (100c) to observe the specified exceptions (6h).

[0281] The last option (6d) specifies that the audience/user will allow interactive icons to be superimposed with no exceptions. This selection would qualify the audience/user for the greatest possible incentives (6g), provided incentive programs are made available. In this scenario, an automated presentation application program (301d) transmitted to the audience's/user's programmable television controller (100c) is free superimpose interactive icons at all times and for all broadcast content sources.

[0282] Selecting the OK button (6a) switches the user back to the screen shown in FIG. 2. Selecting the Help button (6i) triggers the display of a screen explaining how to use the Interactive Icon Options screen (FIG. 6).

[0283] The interactive icons category was selected for the illustrated embodiment to provide television users with control over a potentially ubiquitous form of automated content presentation. It is reasonable to assume that many television users might prefer to view certain programs without the distraction of interactive icons constantly popping up on their television display.

[0284] There are many additional forms of automated content presentation that could be included in the TV Control application (400a) as control option categories. It should be apparent to the reader that it may be desirable to expand the TV Control application (400a) to include control options (400b) for the potentially more intrusive forms.

[0285] FIG. 7Monitoring Exceptions Menu and FIG. 8Interactive Exceptions Menu show screens for choosing a type of exception to be specified for usage monitoring and for interactive icons, respectively. These screens are accessed via the specify exceptions buttons (5h and 6h, respectively) on the screens shown in FIGS. 5 and 6, respectively.

[0286] The current choices for types of exceptions are network exceptions (7b, 8b) and schedule exceptions (7c, 8c). Network exceptions enable television users/audiences to block usage monitoring or interactive triggers for specific networks (i.e. ESPN, CNN, ABC). Schedule exceptions enable television users/audiences to block usage monitoring or interactive triggers for specific days and time ranges.

[0287] Selection of a specify network exceptions button (7b or 8b) will switch the user to a screen for specifying network exceptions (FIGS. 9 and 10, respectively). Selection of a specify schedule exceptions button (7c or 8c) will switch the user to a screen for specifying schedule exceptions (FIGS. 11 and 12, respectively).

[0288] Selection of the OK button (7a or 8a) will switch the user to the screen shown in FIG. 5 or FIG. 6, respectively. Selection of the Help button (7e or 8e) will trigger display of a screen explaining how to use the Monitoring Exceptions Menu screen (FIG. 7) or Interactive Exceptions Menu screen (FIG. 8), respectively.

[0289] The exception types lists (7d and 8d) could conceivably contain links to specify other exception types. For example, an entry could be added to the exception type lists called specify program exceptions. Such an entry would enable television users/audiences to block usage monitoring or interactive icons for specific programs, and would ideally be integrated with an electronic program guide. In each case, the exception types list display could include vertical scrolling capability as required for a long list of exception types.

[0290] FIG. 9Monitoring Network Exceptions and FIG. 10Interactive Network Exceptions show screens for specifying network exceptions, for usage monitoring and for interactive icons, respectively. These screens are accessed via the specify network exceptions buttons (7b, 8b) shown on the screens in FIGS. 7 and 8, respectively.

[0291] Selections for network exceptions are made using the network check boxes (9b, 9c, and 9d; 10b, 10c and 10d). Any network check box that is currently unchecked is eligible for either usage monitoring or interactive icons. Any network check box that is currently checked is considered an exception for either usage monitoring or interactive icons.

[0292] The network lists (9e, 10e) contain a list of all broadcast content networks currently available to the local audience subset (200a) for a specific programmable television controller (100c). In practice, actual network names such as CBS, ABC, ESPN or MTV would appear in place of the italicized text (9b, 9c and 9d; 10b, 10c and 10d).

[0293] This list is generated based on data from the television distributor, including channel map data (which correlates network names with channel numbers) and subscriber data (which determines the specific network selections available to each subscriber). The network lists display would include vertical scrolling capability as required.

[0294] Selection of the OK button (9a or 10a) switches the user back to the screen shown in FIG. 7 or to the screen shown in FIG. 8, respectively. Selection of the Help button (9f or 10f) triggers display of a screen explaining how to use the Monitoring Network Exceptions screen (FIG. 9) or the Interactive Network Exceptions screen (FIG. 10), respectively.

[0295] FIG. 11Monitoring Schedule Exceptions and FIG. 12-Interactive Schedule Exceptions show screens for specifying schedule exceptions, for usage monitoring and interactive icons, respectively. These screens are accessed via the specify schedule exceptions buttons (7c, 8c) shown on the screens in FIGS. 7 and 8, respectively.

[0296] Schedule exceptions are specified by selecting the add schedule exception button (11b, 12b) for usage monitoring and interactive icons, respectively. These buttons both switch the user to the screen shown in FIG. 13.

[0297] As individual schedule exceptions are added, they are subsequently displayed in the schedule exceptions lists (11e, 12e) for usage monitoring and interactive icons, respectively. If individual schedule exceptions are deleted (FIG. 13; 13g), they are subsequently removed from the schedule exceptions lists (11e, 12e).

[0298] The schedule exceptions shown in the illustrated embodiment (11c, 11d; 12c, 12d) are examples. If no schedule exceptions had been previously specified, the list would be empty. The schedule exception list display may include vertical scrolling capability as required for long lists of schedule exceptions.

[0299] Selection of the OK button (11a, 12a) switches the user back to the screen shown in FIG. 7 or to the screen shown in FIG. 8, respectively. Selection of the Help button (11f, 12f) triggers display of a screen explaining how to use the Monitoring Schedule Exceptions screen (FIG. 11) or the Interactive Schedule Exceptions screen (FIG. 12), respectively.

[0300] FIG. 13Schedule Exception Details shows a screen for specifying schedule exception details. The four schedule exception data fields (13b, 13c, 13d and 13e) enable the user/audience to specify any time range of the form Start Time/Start Day to End Time/End Day. If the Start Day field (13c) is set to All, the End Day field (13e) could be disabled, and the time range specified (13b, 13d) would apply to all days of the week. Otherwise, the time range is interpreted literally and can encompass any range up to a full 7-day week.

[0301] The screen shown in FIG. 13 can also be used to delete existing schedule exceptions (13g). Schedule exceptions created with overlapping time ranges would have no adverse effects.

[0302] Selecting the OK button (13a) switches the user back to the screen shown in FIG. 11 or to the screen shown in FIG. 12, depending on which of those screens it was accessed from. Selecting the Help button (13f) triggers display of a screen explaining how to use the Schedule Exception Details screen (FIG. 13).

[0303] FIG. 14Targeted Content Options shows a screen for selectively configuring control options for targeted content presentation. This control option category does not offer the option to block content targeting altogether, but rather enables the user/audience to block targeted content of certain content types.

[0304] Each of the content type check boxes (14b, 14c, 14d, and 14e), when checked, indicate that the user/audience wishes to block automated presentation of targeted content in that specific content type category. The content types list (14f) would likely be generated in conjunction with a specific content targeting application, which would have implemented a well-defined classification of targeted content types. In practice, actual content classifications such as Adult, Banking & Finance, or Computers would appear in place of the italicized text (14b, 14c, 14d, and 14e).

[0305] Blocking specific content types would theoretically provide valuable information for content targeting applications, enabling them to more accurately select content types for the user audience.

[0306] Selection of the OK button (14a) switches the user back to the screen shown in FIG. 2. Selection of the Help button (14g) triggers display of a screen explaining how to use the Targeted Content Options screen (FIG. 14).

[0307] The targeted content control options offered as shown in FIG. 14 are fairly non-restrictive with respect to application programs. This practical example assumes that content targeting applications have been developed essentially to populate existing advertising avails. The deployment of more intrusive content targeting applications might warrant more restrictive control options (400b).

[0308] FIG. 15User Data Options shows a screen for selectively configuring control options (400b) pertaining to the distribution of user data objects (408d) via an audience registry. The illustrated embodiment includes control options (400b) for two specific types of user datapersonal identification data (302k) and user profile data (302j). Control options (400b) for additional categories of user data could easily be added to the TV Control application (400a).

[0309] While this control option category helps to prevent unauthorized distribution of user data objects (408d), its primary intention is to create a secure, user-controlled, permission-based environment for authorized distribution. The TV Control application achieves this, in conjunction with a central registration site (408a), by providing data claims (408i) to application programs in lieu of actual user data objects (408d). Data claims (408i) entitle an application agent (408f) to obtain the user data objects (408d) from the central registration site (408a), but only after they accept specific predetermined legal terms (408j) pertaining to the use or re-distribution of the user data objects. This concept transfers legal control over user data objects (408d) away from application providers (via potentially undesirable privacy policies) and puts it in the hands of television users (400c).

[0310] The first user data category in the illustrated embodiment, user identification data (FIG. 16), includes all data types that have the potential to specifically identify an individual television user (400c). Some examples are name, address, email address, credit card data, and social security number. While these data types are sensitive and should be carefully protected, they frequently must be distributed to do things such as complete a transaction, enter a contest, or request additional information.

[0311] The second user data category in the illustrated embodiment, user profile data (FIG. 17), includes all data types that describe an individual television user (400c) but that do not specifically identify the user. Some examples are age, income, gender and ethnicity. Most users have no issues with the distribution of anonymous profile data; however, when available in conjunction with personal identification data, accurate profile data can be very powerful and therefore is very valuable.

[0312] Additional categories of user data might include usage monitoring data or even content objects such as photographs or creative products. The data claim concept creates a fundamental platform for the controlled distribution and protection for virtually any type of user data object (408d) emanating from a programmable television controller (100c). Further, an audience registry could reasonably apply state-of-the-art technologies for these purposes, where individual television users (400c) might not have access to such advanced technologies on their own.

[0313] Technologies for protecting the security of this data in the transmission process are very effective and widely used. Once it is distributed, however, users' control of the data has proven to be much more complicated. On the World Wide Web, users agree to the terms and conditions presented in a website's privacy policy. This policy typically covers the use, distribution or disclosure of user data. For some sites, however, the terms and conditions of a privacy policy might not be ideal from the user's perspective. Further, some sites may have no privacy policy whatsoever.

[0314] By using the data distribution methods in the TV Control application (400a) in conjunction with an audience registry, television users (400c) can require that commercial entities agree to the terms and conditions (408j) for use, distribution and disclosure of data as defined by the audience registry. These terms and conditions (408j) could also be selectively configured by the television users (400c) themselves via the TV Control application (400a). Otherwise, television users (400c) must either choose not to distribute user data, or must enter user data into forms provided by a digital television application provider, and by default accept the terms of that provider regarding its use, distribution and disclosure.

[0315] The screen shown in FIG. 15 enables television users (400c) to opt in to these data distribution capabilities, which require that the user specifically register with a central registration site (408a) and supply one or more user data objects (408d) to the central registration site. Once they have opted in, registered, and provided user data, users would still authorize data distribution on a case-by-case basis (FIG. 19)in conjunction with a specific transaction, for example.

[0316] The user identification data check box (15b), when checked, indicates that the television user (400c) has elected to use the user identification data distribution capabilities provided by the TV Control application. If this box is checked, the user must select the specify identification data button (15d) to access a screen for specifying identification data types (FIG. 16) that they may wish to distribute in a secure, controlled fashion.

[0317] The user profile data check box (15c), when checked, indicates that the television user (400c) has elected to use the user profile data distribution capabilities provided by the TV Control application. If this box is checked, the user must select the specify profile data button (15e) to access a screen for specifying profile data types (FIG. 17) that they may wish to distribute in a secure, controlled fashion.

[0318] The user data control option types list (15f) includes only two control option types in the illustrated embodiment (15b, 15c). This list could be expanded, however, to encompass additional user data control options. One example might be an option to offer your user data objects (408d) for sale to commercial entities that wish to buy it, in return for data commissions. Such a sale would be, of course, subject to the terms and conditions of an audience registry. The user data control option types list display could include vertical scrolling capability as required.

[0319] Selecting the OK button (15a) switches the user back to the screen shown in FIG. 2. Selecting the Help button (15g) triggers display of a screen explaining how to use the User Data Options screen (FIG. 15).

[0320] FIG. 16User Identification Data shows a screen for specifying user identification data for one or more user identification data types. The television user (400c) would use this screen to specify only those data types that they wish to have available for distribution.

[0321] In the illustrated embodiment, personal identification data types include name (16b), mailing address (16c), email address (16d) and credit card data (16e). Selecting any one of these data type buttons would switch the user to an appropriate screen for specifying the corresponding data. In the case of credit card data (16e), an intermediate screen (FIG. 18) is used to present the multiplicity of user data fields associated with credit card data.

[0322] While the identification data type list (16f) in the illustrated embodiment includes only four identification data types, additional or different data types could also be included in this list. Some examples include television mail (t-mail) address, social security number, secondary credit card data, and telephone number. The identification data type list display could include vertical scrolling capability as required.

[0323] Selecting the OK button switches the user back to the screen shown in FIG. 15. Selecting the Help button (16g) triggers display of a screen explaining how to use the User Identification Data screen (FIG. 16).

[0324] FIG. 17User Profile Data shows a screen for specifying user profile data for one or more user profile data types. The television user (400c) would use this screen to specify only those data types that they wish to have available for distribution.

[0325] In the illustrated embodiment, user profile data types include age (17b), gender (17c), income (17d) and ethnicity (17e). Selecting any one of these data type buttons would switch the user to an appropriate screen for specifying the corresponding data. Specific user profile data types might be required for participation in a particular program, such as an audience measurement program. This requirement might be based on the relative value of certain user profile data types to advertisers and media buyers.

[0326] While the profile data type list (17f) in the illustrated embodiment includes only four user profile data types, additional user profile data types could also be included in this list. Some examples include product type or brand preferences, zip code (versus full address), or number of children. The user profile data type list display could include vertical scrolling capability as required.

[0327] Selecting the OK button switches the user back to the screen shown in FIG. 15. Selecting the Help button (17g) triggers display of a screen explaining how to use the User Profile Data screen (FIG. 17).

[0328] FIG. 18User Credit Card Data shows a screen for specifying data for a particular user credit card. If the audience registry is a television distributor, the use credit card in account file check box (18b) could be displayed. Checking this box would authorize export of credit card data from the television distributor's subscriber management system to the audience registry, and would disable the data fields 18c-18h.

[0329] Credit card data fields include card type (18c), card number (18d), expiration date (18e), name on card (18f), billing address (18g), and shipping address (18h). Selecting one of these data fields will switch the user to a screen for specifying data for that particular data field. It is possible to autofill certain fields for convenience, such as name on card (18f) and billing address (18g), if that information has been provided by the user in the identification data screen (FIG. 16).

[0330] Selecting the OK button (18a) switches the user back to the screen shown in FIG. 16. Selecting the Help button triggers display of a screen explaining how to use the User Credit Card Data screen (FIG. 18).

[0331] FIG. 19Data Distribution Authorization shows a screen for authorizing distribution of specific user data objects (408d) to an application agent (408f) associated with the current interactive television application program (302d). This screen is not displayed as part of the TV Control application interface, but is rather displayed to the television user (400c) in conjunction with the application program's (302d) request for authorization (408g). The double-prime in 302d indicates that the interactive television application program (302d) and one or more associated application agents (408f) have been adapted to be compatible with data distribution authorization and the data claim (408i) concept.

[0332] If the TV Control Application (400a) is operating in individual user preferences mode (see FIG. 1), and if multiple individual television users (400c) are currently specified as being present (see FIG. 3) in the local audience subset (200a), it is necessary to display a simple user selection screen prior to displaying the screen shown in FIG. 19. This would cause the data claim (408i) to be associated with the selected television user (400c).

[0333] The display of the screen shown in FIG. 19, and a corresponding television user selection screen (not shown) could either be embedded in the adapted application program (302d), or could be displayed by the TV Control application (400a) in response to a request from the application program. This would occur in conjunction with a specific transaction request, information request or participation request by a television user (400c).

[0334] The user data type list (19e) shown in the illustrated embodiment includes three user data type check boxes. These are name (19b), credit card data (19c) and age (19c). This serves as an example only, and represents the data either required or desired by a specific application program (302d) to complete a specific action or function. Ideally, the application program (302d) would select user data types exclusively from a list of the data types that the user has made available through the audience registry. If the required data types are not available for the current television user (400c), the application agent (408f) would not have the option of processing the user's request through their audience registry.

[0335] In the illustrated embodiment, the name (19b) and credit card data (19c) check boxes are flagged as required, indicating that the television user (400c) must check those two data types to complete the transaction in this example. The age check box (19d) represents a user data type that is not required to complete the transaction, but that would be helpful for the application provider's purposes. Note that no actual user data objects (408d) are specified or distributed in this interface itself.

[0336] Selecting the OK button (19a) authorizes the generation of data claims (408i) for the checked data types, and exits the authorization interface. It might be desirable to require confirmation of this step. Selecting the Help button (19f) would trigger display of a screen explaining how to use the Data Distribution Authorization screen (FIG. 19).

[0337] FIG. 20Networked Device Options shows a screen for authorizing access, for application programs, to local networked devices (203b) or to data associated with those devices (300i). The screen in the illustrated embodiment shows these control options for three distinct (20c, 20d, and 20e) networked devices (203b). In practice, actual device names or identifiers such as video recorder, audio controller or security system would appear in place of the italicized text (20c, 20d, and 20e).

[0338] In the illustrated embodiment, the audience/user configures the control options (400b) for networked devices (203b) using the check boxes for permitting access to external device data (20f, 20g, and 20h), and for permitting access for external device command and control (20i, 20j, and 20k). The networked device list (20m) display could include vertical scrolling capability as required.

[0339] The audience/user can also add new networked devices (203b) to the networked device list (20m) by using the New Device button (20b). Selecting this button would switch the user to a screen for identifying an additional networked device (203b), and would likely access system-level resources in the programmable television controller (100c) to obtain information regarding networked devices present.

[0340] The range of devices that could be networked with a programmable television controller (100c) is potentially very broad. The television could easily serve as a general-purpose audiovisual environment for controlling everything from home entertainment to security systems to grocery shopping (when networked with a smart fridge, for example). As networked smart devices proliferate in the home, the television could also serve as an ideal environment for controlling access to these devices, and to their associated data.

[0341] The range of control options (400b) offered with respect to networked devices (203b) could reasonably be as broad as the range of control options (400b) offered for the programmable television controller (100c) itself. The nature of control options (400b) offered for networked devices (203b) would likely be dictated by the nature of networked applications being developed for those devices.

[0342] Selecting the OK button (20a) switches the user back to the screen shown in FIG. 2. Selecting the Help button (20n) triggers display of a screen explaining how to use the Networked Device Options screen (FIG. 20).

[0343] FIG. 21Application Authorization Options shows a screen for choosing an application authorization mode for the programmable television controller (100c). The illustrated embodiment offers four mutually-exclusive authorization mode options (21b, 21c, 21d, and 21e).

[0344] The first authorization mode option (21b) indicates that the audience/user authorizes certified application programs only on the programmable television controller (100c). This option assumes the existence of an application certification provider (402a).

[0345] The second authorization mode option (21c) indicates that the audience/user authorizes application programs from registered application programs only on the programmable television controller (100c). This option assumes the existence of a commercial registration provider (403a).

[0346] The third authorization mode option (21d) indicates that the audience/user wishes to explicitly select specific application providers, thereby authorizing application programs from those application providers only. This option requires that the audience/user access the Application Providers screen (FIG. 22) to select one or more application providers. This screen can be accessed via the specify application providers button (21g).

[0347] The fourth authorization mode option (21e) indicates that the audience/user wishes to explicitly select specific application programs, thereby authorizing operation of those application programs only. This option requires that the audience/user access the Application Programs screen (FIG. 23) to select one or more application programs. This screen can be accessed via the specify application programs button (21h).

[0348] The application authorization radio selection group (21f) could be expanded to include additional authorization mode options, to the extent that any new options can be supported on an operational basis.

[0349] Selecting the OK button (21a) switches the user back to the screen shown in FIG. 2. Selecting the Help button (21i) triggers display of a screen explaining how to use the Application Authorization Options screen (FIG. 21).

[0350] FIG. 22Application Providers shows a screen for selecting one or more application providers, thereby authorizing application programs from those application providers only.

[0351] The audience/user selects specific application providers using the application provider check boxes (22b, 22c, and 22d). In practice, actual application provider names or identifiers would appear in place of the italicized text (22b, 22c, and 22d).

[0352] The application provider list (22e) would contain all application providers who currently offer application programs for execution on the programmable television controller (100c). The application provider list (22e) would likely be imported from a television distributor, and/or from other sources that aggregate directories of existing application providers. The application provider list display could include vertical scrolling capability as required.

[0353] Selecting the OK button (22a) switches the user back to the screen shown in FIG. 21. Selecting the Help button (22f) triggers display of a screen explaining how to use the Application Providers screen (FIG. 22).

[0354] FIG. 23Application Programs shows a screen for selecting one or more application programs, thereby authorization operation of those application programs only.

[0355] The audience/user selects specific application programs using the application program check boxes (23b, 23c, and 23d). In practice, actual application program names or identifiers would appear in place of the italicized text (23b, 23c, and 23d).

[0356] The application program list (23e) would contain all application programs currently offered for execution on the programmable television controller (100c). The application program list (23e) would likely be imported from a television distributor, and/or from other sources that aggregate directories of available application programs. The application program list display could include vertical scrolling capability as required.

[0357] Selecting the OK button (23a) switches the user back to the screen shown in FIG. 21. Selecting the Help button (23f) triggers display of a screen explaining how to use the Application Programs screen (FIG. 22).

[0358] The implementation of the present invention, in practice, may involve control option categories or control options not specifically shown in the illustrated embodiment. The foregoing description should make it clear to the reader that many additional control option categories and control options are possible in the spirit of the invention. That spirit is to provide television users with a means for maintaining control of their television experiences in the digital television environment, and with a foundation for leveraging the digital television infrastructure for their protection and benefit.

[0359] TV Control Integrated Management Application Interface

[0360] The TV Control application (400a) concept is most effective when used in conjunction with one or more centralized service bureaus, such as an application certification provider (402a), a commercial registration provider (403a), a central collection site (404a), a central aggregation site (406a), and/or a central registration site (408a). Each of these centralized service bureaus are potential components of an audience registry.

[0361] Further, the TV Control application (400a) requires a certain degree of integration with and support from a subscriber's television distributor. Finally, the distribution, configuration and/or maintenance of the TV Control application (400a) itself might require some type of centralized support as well, either from an audience registry, from a television distributor, or from an independent TV Control application provider.

[0362] FIGS. 50-59 illustrate one potential embodiment of an integrated management application interface that could be used for all of these centralized functions.

[0363] The management application interface shown in the illustrated embodiment is integrated because it shows both television distributor functionality and audience registry functionality together in the same interface. This interface assumes that the television distributor has chosen to function as an audience registry for its subscribers.

[0364] If an audience registry existed independently of the television distributor, much of the functionality shown in the illustrated embodiment could be offered by the audience registry as well.

[0365] It is also conceivable that a television distributor would wish to aggregate control option specifications (400e) for any of its subscribers that are associated with a specific audience registry. This can be achieved either through integration with the audience registry, or through use of a pools and polling tools application interface implemented independently of the audience registry.

[0366] FIG. 50Distributor Menu shows a main menu screen for a television distributor also acting as an audience registry. Possible selections include installation and user registration (50b), pools and collection (50c), incentive programs (50d), user selection lists (50e), commercial registrations (50f), application program certification (50g), and user data processing (50h).

[0367] Selection of installation and user registration (50b) will switch the user to the screen shown in FIG. 51, where they can access tools and data related to the installation of TV Control applications (400a) and the associated registration of television users (400c).

[0368] Selection of pools and collection (50c) will switch the user to the screen shown in FIG. 52, where they can access tools and data related to control option specifications (400e) from the TV Control application (400a).

[0369] Selection of incentive programs (50d) will switch the user to the screen shown in FIG. 54, where they can access tools and data related to incentive programs established for the TV Control application (400a).

[0370] Selection of user selection lists (50e) will switch the user to the screen shown in FIG. 56, where they can access tools related to importing user selection lists (9e, 10e, 14f, 22e, and 23e) for the TV Control application (400a).

[0371] Selection of commercial registrations (50f) will switch the user to the screen shown in FIG. 57, where they can access tools and data related to the commercial registration and management of digital television application providers.

[0372] Selection of application program certification (50g) will switch the user to the screen shown in FIG. 58, where they can access tools and data related to the certification of digital television application programs.

[0373] Selection of user data processing (50h) will switch the user to the screen shown in FIG. 59, where they can access tools and data related to the processing of data claims (408i).

[0374] Selection of the OK button (50a) will cause the user to exit the management application interface. Selection of the Help button (50i) will trigger display of a screen explaining how to use the Distributor Menu (FIG. 50).

[0375] FIG. 51Installation and User Registration shows a menu screen for accessing tools and data related to the installation of TV Control applications (400a) and the associated registration (see FIG. 408) of television users (400c).

[0376] The automation option (51b) will switch the user to an interface for setting up automated application installation and/or user registration. This functionality could be integrated with a subscriber management system, automating installation and registration for new subscribers, and automating the appropriate cancellation procedures for subscriber disconnects.

[0377] The current user registrations option (51c) will switch the user to an interface for searching the television distributor's database of currently registered television users (400c) in the context of the TV Control application (400a), based on a flexible set of search criteria.

[0378] The installation tools option (51d) will switch the user to an interface for manually installing, configuring or uninstalling the TV Control application (400a) on one or more programmable television controllers (100c), or for troubleshooting installations.

[0379] The user registration tools option (51d) will switch the user to an interface for manually managing or troubleshooting registration of television users in the context of the TV Control application (400a).

[0380] Selecting the OK button (51a) will switch the user back to the screen shown in FIG. 50. Selecting the Help button (51f) would trigger display of a screen explaining how to use the Installation and User Registration screen (FIG. 51).

[0381] FIG. 52Pools and Collection shows a menu screen for accessing tools and data related to control option specifications (400e) produced by the TV Control application (400a).

[0382] The automation option (52b) will switch the user to an interface for automating the collection of control option specifications (400e) for a distributor's subscribers. This functionality could be integrated with a distributor's subscriber management system.

[0383] The current pools option (52c) will switch the user to the screen shown in FIG. 53, where they will be able to access control option specifications (400e) by specific control option categories.

[0384] The collection tools option (52d) will switch the user to an interface for manually collecting control option specifications (400e), or for collection troubleshooting.

[0385] The compliance tools option (52e) will switch the user to an interface for leveraging control option specifications (400e) in the distribution, installation, configuration or uninstallation of digital television applications. This functionality could be offered to third party digital television application providers for integration with their application distribution and installation utilities.

[0386] Selecting the OK button (52a) will switch the user back to the screen shown in FIG. 50. Selecting the Help button (52f) will trigger display of a screen explaining how to use the Pools and Collection screen (FIG. 52).

[0387] FIG. 53Current Pools shows a menu screen for accessing control option specifications (400e) by specific control option categories. Each distinct control option category encompasses a pool of aggregated subscriber control option specifications that can be queried and employed in the distribution, installation, uninstallation or configuration of digital television applications. TV Control pools have great value for television distributors, as they represent the subscriber base available for certain types of digital television applications and services.

[0388] Also, as previously noted, TV Control pools could be further aggregated for the convenience of digital television application providers. For example, a national aggregated monitoring pool could include control option specifications for all local audience subsets (200a) across the country that have opted to permit usage monitoring applications (300c) on their programmable television controllers (100c). This pool could then become the basis for random selection of specific local audience subsets (200a) for an audience measurement program.

[0389] The usage monitoring pool option (53b) will switch the user to a reporting interface showing aggregate usage monitoring control option specifications (FIG. 5) across the distributor's subscribers.

[0390] The interactive icons pool option (53c) will switch the user to a reporting interface showing aggregate interactive icon control options (FIG. 6) across the distributor's subscribers.

[0391] The targeted content pool option (53d) will switch the user to a reporting interface showing aggregate targeted content control options (FIG. 14) across the distributor's subscribers.

[0392] The user data pool option (53e) will switch the user to a reporting interface showing aggregate user data control options (FIG. 15) across the distributor's subscribers.

[0393] The networked device pool option (53f) will switch the user to a reporting interface showing aggregate networked device control options (FIG. 20) across the distributor's subscribers.

[0394] The current pool list might also contain options for accessing reporting interfaces related to application authorization control options (see FIG. 21). It is also possible, and perhaps desirable, to define additional control option types for the TV Control application (400a), and therefore to provide additional control option specification pools in the current pool list (53f). The current pool list display could include vertical scrolling capability as required.

[0395] Selecting the OK button (53a) will switch the user back to the screen shown in FIG. 52. Selecting the Help button (53h) will trigger display of a screen explaining how to use the Current Pools screen (FIG. 53).

[0396] FIG. 54Incentive Programs shows a menu screen for accessing tools and data related to distributor-defined incentive programs. Television distributors can choose to offer incentives for a subscriber's granting of specific permissions, or for a subscriber's participation in specific programs. Incentive programs would likely be developed to encourage permission or participation that would be the most useful or financially rewarding for the television distributor.

[0397] The automation option (54b) will switch the user to an interface for automating the monitoring or distribution of incentives for the distributor's subscribers. This functionality could be integrated with the distributor's subscriber management system.

[0398] The user earnings option (54c) will switch the user to reporting interface for showing current earned incentive status across the distributor's subscribers.

[0399] The incentive program setup option (54d) will switch the user to the screen shown in FIG. 55, where they can access various tools for the establishment and configuration of specific incentive programs.

[0400] The incentive management tools option (54e) will switch the user to an interface for manually managing monitoring or distribution of incentives across the distributor's subscribers.

[0401] Selecting the OK button (54a) will switch the user back to the screen shown in FIG. 50. Selecting the Help button (54f) will trigger display of a screen explaining how to use the Incentive Programs screen (FIG. 54).

[0402] FIG. 55Incentive Program Setup shows a menu screen for accessing and configuring specific incentive programs. Configuration of incentive programs would include association with specific control option categories and/or specific control options, specification of the nature of incentives offered, specification of the requirements for eligibility, specification of the variables and formulas used to accumulate and calculate incentives, and specification of the methodology used to distribute incentives to subscribers.

[0403] The household monitoring incentives option (55b) will switch the user to an interface for specifying and configuring incentives for permitting household usage monitoring (based on common audience preferences1e).

[0404] The individual monitoring incentives option (55c) will switch the user to an interface for specifying and configuring incentives for permitting individual usage monitoring (based on individual user preferences1f). This incentive program might require specification of certain profile data for eligibility.

[0405] The interactive incentives option (55d) will switch the user to an interface for specifying and configuring incentives for permitting the automated customization of broadcast programming with interactive icons or triggers.

[0406] The incentive program list (55e) in the illustrated embodiment for the integrated management application interface includes only three incentive programs, which are based on the control option categories and control options in the illustrated embodiment of the TV Control Application interface (FIGS. 1-23). It is conceivable to define additional incentive programs, either based on the control options shown in the illustrated embodiment, or based on new control options.

[0407] To that end, the add incentive program button (55f) will switch the user to an interface for specifying incentive program details for a new incentive program.

[0408] Selecting the OK button (55a) will switch the user back to the screen shown in FIG. 54. Selecting the Help button (55g) will trigger display of a screen explaining how to use the Incentive Program Setup screen (FIG. 55).

[0409] FIG. 56User Selection Lists shows a menu screen for accessing utilities used to import data for a variety of user selection lists (9e, 10e, 14f, 22e, and 23e) used in the TV Control application (400a). These content of these user selection lists may vary significantly across television distributors, and may even vary across subscribers within a television distributor's subscriber base.

[0410] The automation option (56b) will switch the user to an interface for automating the import and/or management of user selection lists for TV Control applications (400a). This functionality could be integrated with a variety of data sources.

[0411] The networks option (56c) will switch the user to an interface for manually importing and/or managing the network selection lists (9e and 10e) for the TV Control application (400a). These lists may use data from both channel mapping databases and from subscriber management systems, and are used for specifying monitoring and/or interactive network exceptions (FIGS. 9 and 10).

[0412] The content types option (56d) will switch the user to an interface for manually importing and/or managing the content types list (14f) for the TV Control application (400a). This list may use data from a targeted content delivery system, and is used for blocking certain types of targeted content (FIG. 14).

[0413] The application providers option (56e) will switch the user to an interface for manually importing and/or managing the application providers list (22e) for the TV Control application. This list is used for authorizing applications from specific application providers.

[0414] The application programs option (56f) will switch the user to an interface for manually importing and/or managing the application programs list (23e) for the TV Control application. This list is used for authorizing specific application programs.

[0415] Certain new control option categories, control options or exception types could require similar tools and utilities. For example, the ability to specify monitoring or interactive exceptions on a program-by-program basis would require that the TV Control application (400a) import data for individual programs from an electronic program guide.

[0416] Selecting the OK button (56a) will switch the user back to the screen shown in FIG. 50. Selecting the Help button (56g) will trigger display of a screen explaining how to use the User Selection Lists screen (FIG. 56).

[0417] FIG. 57Commercial Registrations shows a menu screen for accessing utilities and data related to commercial registration for digital television application providers or application agents (408f). Aside from registration requirements pursuant to application authorization (see FIG. 403) or user data processing (see FIG. 408), application providers could also be required to register to access control option specification data (i.e. 404e).

[0418] It is also possible, and perhaps desirable, for the commercial registration process to include some level of screening for each commercial applicant. This screening might include confirmation of the applicant as a legitimate commercial entity, investigation for any indication of questionable or undesirable business practices or activities on part of the applicant, searches for any consumer ratings or opinions regarding the applicant, or an attempt to characterize the economic viability of the applicant.

[0419] The screening process would be based on pre-defined registration criteria (504f), and could employ commercially available information sources (403e). Any potentially relevant information arising from the screening process could be used either to deny a commercial applicant's registration request (403b), or alternatively to notify users of this information prior to processing a data claim (408i).

[0420] The automation option (57b) will switch the user to an interface for automating the registration and/or screening of commercial entities, such as application providers or application agents (408f).

[0421] The current registrations option (57c) will switch the user to a reporting interface showing current commercial registrations.

[0422] The commercial registration criteria option (57d) will switch the user to an interface for specifying the commercial registration criteria (504f) against which each commercial registration application is measured.

[0423] The commercial registration tools option (57e) will switch the user to an interface for manually managing and/or troubleshooting commercial registrations.

[0424] Selecting the OK button (57a) will switch the user back to the screen shown in FIG. 50. Selecting the Help button (57f) will trigger display of a screen explaining how to use the Commercial Registrations screen (FIG. 57).

[0425] FIG. 58Application Program Certification shows a menu screen for accessing utilities and data related to application program certification. The certification process for application programs might simulate operation of the application program on a device representing a programmable television controller (100c). Generally speaking, an application program that demonstrates compliance with control option specifications (400e) during this simulation will be granted a compliance certificate (402e).

[0426] The automation option (58b) will switch the user to an interface for automating the certification process for application programs.

[0427] The current certifications option (58c) will switch the user to a reporting interface showing current application certifications.

[0428] The certification criteria option (58d) will switch the user to an interface for specifying the certification criteria against which each certification application is measured.

[0429] The certification tools option (58e) will switch the user to an interface for manually managing and/or troubleshooting application certifications.

[0430] Selecting the OK button (58a) will switch the user back to the screen shown in FIG. 50. Selecting the Help button (58f) will trigger display of a screen explaining how to use the Application Program Certification screen (FIG. 58).

[0431] FIG. 59User Data Processing shows a menu screen for managing the processing of user data claims (408i) presented to the central registration site (408a) by application agents (408f). User data claims (408i) entitle application agents (408f) to one or more user data objects (408d), provided that the data claim (408i) is authentic, and that the application agent (408f) agrees to predetermined distribution terms and conditions (408j) pertaining to the application agent's use of the user data objects.

[0432] The automation option (59b) will switch the user to an interface for automating the processing of user data claims (408i), or reporting to television users (400c) based on the results of data claim processing.

[0433] The distribution terms and conditions option (59c) will switch the user to an interface for specifying legal terms and conditions (408j) pertaining to the application agents' (408f) use of user data objects (408d). It is conceivable that each television user (400c) would somehow participate in the specification of these terms and conditions (408j) pertaining to their own user data objects (408d).

[0434] The distribution reporting option (59d) will switch the user to an interface for manually configuring and/or managing reporting to television users (400c) based on the results of data claim processing.

[0435] The distribution tools option (59e) will switch the user to an interface for manually configuring and/or managing the processing of user data claims (408i), or for troubleshooting data claim processing.

[0436] Selecting the OK button (59a) will switch the user back to the screen shown in FIG. 50. Selecting the Help button (59f) will trigger display of a screen explaining how to use the User Data Processing screen (FIG. 59).

[0437] The foregoing description is only one potential embodiment of a management application interface for a TV Control system. In practice, design of the management application interface would be influenced by many factors, such as integration requirements, the nature and capabilities of management application systems, legal guidelines and requirements, or television distributor preferences.

[0438] TV Control System Architecture

[0439] The diagrams in FIGS. 400-408 depict high-level architecture and data flow characteristics for various aspects and embodiments of the TV Control system.

[0440] These diagrams show relationships between physical or application elements (shown as rectangles), as well as data or information elements flowing between them (shown as arrows). In some cases, multiple data or information elements flow between the same physical or application elements. In these cases, the data or information elements are presented as a group (shown with a 3-dimensional shadow and connected to a single lead line).

[0441] In FIGS. 400-408, it is assumed that the control option specification means is embodied in a TV Control application (400a), which is an interactive television application program (302d), and which has been installed on the programmable television controller (100c). The control option specification means for the present invention could assume many other forms, such as a Web application program or a paper questionnaire.

[0442] Installation of the TV Control application (400a) can be achieved in any of several ways. For example, an interactive television application provider (302a)including either a television distributor or an audience registrycould transmit the TV Control application (400a) to the programmable television controller (100c), either automatically or based on an explicit request from the television user (400c). Alternatively, the television user (400c) could manually load the TV Control application (400a) on the programmable television controller (100c) via a local networked device (203b) or a removable storage device (204a).

[0443] In FIGS. 400-408, it is also assumed that the central service bureaus depicted (302a, 402a, 403a, 404a, 406a, and 408a) have been established and have been associated as required with the illustrated instance of the TV Control application (400c). It is further assumed that the TV Control application (400c) has been associated as required with a specific television distributor. Consequently, it is also assumed that data for user selection lists (9e, 10e, 14f, 22e, and 23e) has been provided to the TV Control application (400a).

[0444] FIG. 400 shows a TV Control system where the application programs (300c, 301d, and 302d) have been voluntarily adapted (300c, 301d and 302d) by an application provider (not pictured) to operate in compliance with the control option specification (400e) from a TV Control application (400a).

[0445] The TV Control application (400a) is executed on a program processor (200f) in the programmable television controller (100c). The TV Control application (400a) is accessed on-demand by a television user (400c) in the local audience subset (200a).

[0446] The TV Control application (400a) uses a display processor (200i) in the programmable television controller (100c) to convert one or more control options (400b) into display output signals (200j) compatible with the television display device (200f), which in turn displays an audiovisual interface (200m) for the television user (400c).

[0447] In response, the television user (400c) selectively configures the control options (400b) by interacting (200b) with a television input device (200c), which converts the interaction into data signals (200d), which a user input processor (200e) inside the programmable television controller (100c) translates as a selective configuration of control options (400d) for the TV Control application (400a).

[0448] The TV Control application (400a) then generates a control option specification (400e) representative of the television user's (400c) selective configuration (400d) of the control options (400b), and stores the control option specification (400e) in an internal storage device (200g) in the programmable television controller (100c). The control option specification (400e) is consequently associated with the programmable television controller (100c).

[0449] Alternative local storage means for the control option specification (400e) include a removable storage device (204a) or a local networked device (203b).

[0450] When an adapted application program (300c, 301d, or 302d) is transmitted to the programmable television controller (100c) and executed by the program processor (200f), it will access the control option specification (400e) by retrieving control option specification data (400g) from the internal storage device (200g). The control option specification data (400g) may contain all or part of the control option specification (400e).

[0451] The adapted application program (300c, 301d, or 302d) then governs its operation to be compliant with the control option specification (400e) for the programmable television controller (100c).

[0452] FIG. 401 shows a TV Control system where the application programs (300c, 301d, and 302d) have not been adapted, but instead where the TV Control application (400a) forces compliance of the application programs by monitoring and blocking application events at the system level.

[0453] Once again, the TV Control application (400a) is executed on a program processor (200f) in the programmable television controller (100c). The TV Control application (400a) is accessed on-demand by a television user (400c) in the local audience subset (200a).

[0454] Again, the TV Control application (400a) uses a display processor (200i) in the programmable television controller (100c) to convert one or more control options (400b) into display output signals (200j) compatible with the television display device (200f), which in turn displays an audiovisual interface (200m) for the television user (400c).

[0455] In response, the television user (400c) selectively configures the control options (400b) by interacting (200b) with a television input device (200c), which converts the interaction into data signals (200d), which a user input processor (200e) inside the programmable television controller (100c) translates as a selective configuration of control options (400d) for the TV Control application (400a).

[0456] The TV Control application (400a) then generates a control option specification (400e) representative of the television user's (400c) selective configuration (400d) of the control options (400b), and stores the control option specification (400e) in an internal storage device (200g) in the programmable television controller (100c). The control option specification (400e) is consequently associated with the programmable television controller (100c).

[0457] When an application program (300c, 301d, or 302d) is transmitted to the programmable television controller (100c) and executed by the program processor (200f), the TV Control application (400a) commences monitoring application event data (401a) for the application program. The TV control application (400a) specifically looks for application events that violate the control option specification (400e).

[0458] The TV Control application (400a) can achieve this using a variety of methods that are well understood in the prior art, such as by monitoring the use of system resources by application programs (300c, 301d, and 302d), or by looking for certain signatures characterizing non-compliant application programs.

[0459] If any non-compliant application events are detected, the TV Control application (400a) will attempt to block the non-compliant events by issuing command and control signals (401c) to the application program (300c, 301d, or 302d), and in some cases may communicate control option specification data (401b) to the application program.

[0460] If the TV Control application (400a) is unsuccessful in blocking the non-compliant application events, it may then attempt to terminate operation of the application program (300c, 301d, or 302d) by issuing command and control signals (401c), possibly in cooperation with the program processor (200f).

[0461] FIG. 402 shows a TV Control system where application certification is used to authorized the operation of adapted application programs (300c, 301d, and 302d) on the programmable television controller (100c).

[0462] FIG. 402 assumes that the television user (400c) has selectively configured (400d) the control options (400b) as illustrated in FIGS. 400 and 401. It is also assumed that the television user (400c) has selected the first authorization mode option (21b) shown in FIG. 21Application Authorization Options.

[0463] The TV Control application (400a) generates a control option specification (400e) representative of the television user's (400c) selective configuration (400d) of the control options (400b), and stores the control option specification (400e) in an internal storage device (200g) in the programmable television controller (100c). The control option specification (400e) is consequently associated with the programmable television controller (100c).

[0464] In the application infrastructure (103k or 103n), an application provider (300a, 301a, or 302a) has submitted an application certification request (402c), along with application program data (402d) for an adapted application program (300c, 301d, or 302d), to an application certification provider (402a) associated with the programmable television controller (100c).

[0465] The application certification provider (402a) will simulate operation of the adapted application program (300c, 301d, or 302d) on a certification analysis device (402b) representative, at least, of the programmable television controller (100c).

[0466] If the simulated operation of the adapted application program (300c, 301d, or 302d) demonstrates compliance as required with control option specifications (400e), the application certification provider will generate a compliance certificate (402e) for the application program, and communicate the compliance certificate (402e) to the application provider (300a, 301a, or 302a).

[0467] Subsequently, when the application provider (300a, 301a, or 302a) transmits application program data (402f) for the adapted application program (300c, 301d, or 302d) to the programmable television controller, it will also transmit the compliance certificate (402e) issued for that application program.

[0468] When executed by the program processor (200f), the adapted application program (300c, 301d, or 302d) will present its compliance certificate (402e) to the TV Control application (400a). If the TV Control application (400a) can authenticate the compliance certificate (402e), it will authorize (402g) continued operation of the adapted application program (300c, 301d, or 302d) on the programmable television controller (100c). Please see the description for FIG. 408 for details of an authentication method.

[0469] The adapted application program (300c, 301d, or 302d) then accesses the control option specification (400e) by retrieving control option specification data (400g) from the internal storage device (200g). The control option specification data (400g) may contain all or part of the control option specification (400e).

[0470] The adapted application program (300c, 301d, or 302d) then governs its operation to be compliant with the control option specification (400e) for the programmable television controller (100c).

[0471] FIG. 403 shows a TV Control system where commercial registration of application providers is used to authorized the operation of adapted application programs (300c, 301d, and 302d) on the programmable television controller (100c).

[0472] FIG. 403 assumes that the television user (400c) has selectively configured (400d) the control options (400b) as illustrated in FIGS. 400 and 401. It is also assumed that the television user (400c) has selected the second authorization mode option (21c) shown in FIG. 21Application Authorization Options.

[0473] The TV Control application (400a) generates a control option specification (400e) representative of the television user's (400c) selective configuration (400d) of the control options (400b), and stores the control option specification (400e) in an internal storage device (200g) in the programmable television controller (100c). The control option specification (400e) is consequently associated with the programmable television controller (100c).

[0474] In the application infrastructure (103k or 103n), an application provider (300a, 301a, or 302a) has submitted a provider registration request (403b), along with provider identification data (403c), to a commercial registration provider (403a) associated with the programmable television controller (100c).

[0475] The commercial registration provider (402a) will then issue a registration data request (403d), along with provider identification data (403c), to one or more registration data providers (403e). The registration data providers (403e) will respond with registration data (403f) pertaining to the application provider (300a, 301a, or 302a).

[0476] Registration data (403f) could be any data that enables the commercial registration provider (402a) to measure an application provider (300a, 301a, or 302a) against pre-determined commercial registration criteria. Registration data providers (403e) could be any commercial source of this data.

[0477] If the application provider (300a, 301a, or 302a) satisfies the pre-determined commercial registration criteria, the commercial registration provider (403a) will then present one or more registration terms and conditions (403g) to the application provider (300a, 301a, or 302a). These registration terms and conditions (403g) will at least include a requirement for the application provider (300a, 301a, or 302a) to adapt its application programs (300c, 301d, or 302d) to be compliant with control option specifications (400e).

[0478] If the application provider (300a, 301a, or 302a) accepts the registration terms and conditions (403h), the commercial registration provider (403a) will generate a provider registration (403i) and communicate that provider registration to the application provider (300a, 301a, or 302a).

[0479] Subsequently, when the application provider (300a, 301a, or 302a) transmits application program data (402f) for adapted application programs (300c, 301d, or 302d) to the programmable television controller (100c), it will also transmit its provider registration (403i).

[0480] When executed by the program processor (200f), the adapted application program (300c, 301d, or 302d) will present the provider registration (403i) to the TV Control application (400a). If the TV Control application (400a) can authenticate the provider registration (403i), it will authorize (403j) continued operation of the adapted application program (300c, 301d, or 302d) on the programmable television controller (100c). Please see the description for FIG. 408 for details of an authentication method.

[0481] The adapted application program (300c, 301d, and 302d) then accesses the control option specification (400e) by retrieving control option specification data (400g) from the internal storage device (200g). The control option specification data (400g) may contain all or part of the control option specification (400e).

[0482] The adapted application program (300c, 301d, or 302d) then governs its operation to be compliant with the control option specification (400e) for the programmable television controller (100c).

[0483] FIG. 404 shows a TV Control system where a central collection site (404a) is used in conjunction with the TV Control application (400a) to facilitate compliance of adapted application programs (300c, 301d, and 302d) on the programmable television controller (100c).

[0484] FIG. 404 assumes that the television user (400c) has selectively configured (400d) the control options (400b) as illustrated in FIGS. 400 and 401. It is also assumed that a second control option specification (400e) has been stored in a second storage device (200g) in association with a second programmable television controller (not pictured).

[0485] The TV Control application (400a) generates a control option specification (400e) representative of the television user's (400c) selective configuration (400d) of the control options (400b), and stores the control option specification (400e) in an internal storage device (200g) in the programmable television controller (100c). The control option specification (400e) is consequently associated with the programmable television controller (100c).

[0486] Both the control option specification (400e) and the second control option specification (400e) are retrieved from their respective storage devices (200g, 200g) and communicated to a collection and reporting system (404b) at a central collection site (404a) in the application infrastructure (103k or 103n).

[0487] This retrieval and communication could be executed in a variety of ways, including by an automated collection process initiated by the collection and reporting system (404b), by an automated submission process initiated by the TV Control application (400a), or by a manual submission process initiated by the television user (400c).

[0488] The collection and reporting system (404b) then stores a first plurality of control option specifications (404c) in its associated collection storage device (404d). The first plurality of control option specifications (404c) at least includes the control option specification (400e) and the second control option specification (400e).

[0489] An adapted application program (300c, 301d, or 302d) is executed by the program processor (200f) in the programmable television controller (100c). Either automatically or in response to a request from the adapted application program (300c, 301d, or 302d), the collection and reporting system (404b) retrieves the control option specification (400c) from the collection storage device (404d), and communicates control option specification data (404e) to the application program (300c, 301d, or 302d).

[0490] The control option specification data (404e) contains all or part of the control option specification (400e). The adapted application program (300c, 301d, or 302d) then governs its operation to be compliant with the control option specification (400e) for the programmable television controller (100c).

[0491] FIG. 405 shows a TV Control system where a central collection site (404a) is used in conjunction with the TV Control application (400a) and with application providers (300a, 301a, and 302a) to facilitate compliance of adapted application programs (300c, 301d, and 302d) on the programmable television controller (100c).

[0492] FIG. 405 assumes that the television user (400c) has selectively configured (400d) the control options (400b) as illustrated in FIGS. 400 and 401. It is also assumed that a second control option specification (400e) has been stored in a second storage device (200g) in association with a second programmable television controller (not pictured).

[0493] The TV Control application (400a) generates a control option specification (400e) representative of the television user's (400c) selective configuration (400d) of the control options (400b), and stores the control option specification (400e) in an internal storage device (200g) in the programmable television controller (100c). The control option specification (400e) is consequently associated with the programmable television controller (100c).

[0494] Both the control option specification (400e) and the second control option specification (400e) are retrieved from their respective storage devices (200g, 200g) and communicated to a collection and reporting system (404b) at a central collection site (404a) in the application infrastructure (103k or 103n).

[0495] The collection and reporting system (404b) then stores a first plurality of control option specifications (404c) in its associated collection storage device (404d). The first plurality of control option specifications (404c) at least includes the control option specification (400e) and the second control option specification (400e).

[0496] Either automatically or in response to a request from the application provider (300a, 301a, or 302a), the collection and reporting system (404b) retrieves the control option specification (400e) from the collection storage device (404d), and communicates control option specification data (405a) to the application provider (300a, 301a, or 302a).

[0497] The control option specification data (404e) contains all or part of the control option specification (400e). The application provider (300a, 301a, or 302a) then configures an adapted application program (300c, 301d, 302d) to operate in compliance with the control option specification (400e), and transmits the resulting application program data (405b), possibly along with control option specification data (405a) to the programmable television controller (100c).

[0498] It is also conceivable that the application provider (300a, 301a, or 302a) would choose not to transmit the adapted application program (300c, 301d, or 302d) to the programmable television controller (100c), based on the control option specification data (405a).

[0499] Once transmitted to the programmable television controller (100c) and executed by the program processor (200f), the adapted application program (300c, 301d, or 302d) then governs its operation to be compliant with the control option specification (400e).

[0500] FIG. 406 shows a TV Control system where a central collection site (404a) and a central aggregation site (406a) are used in conjunction with the TV Control application (400a) to facilitate compliance of adapted application programs (300c, 301d, and 302d) on the programmable television controller (100c).

[0501] FIG. 406 assumes that the television user (400c) has selectively configured (400d) the control options (400b) as illustrated in FIGS. 400 and 401. It is also assumed that a second control option specification (400e) has been stored in a second storage device (200g) in association with a second programmable television controller (not pictured), and that a third control option specification (400e) associated with a third programmable television controller (not pictured) has been stored in a second collection storage device (406e) associated with a second central collection site (not pictured).

[0502] The TV Control application (400a) generates a control option specification (400e) representative of the television user's (400c) selective configuration (400d) of the control options (400b), and stores the control option specification (400e) in an internal storage device (200g) in the programmable television controller (100c). The control option specification (400e) is consequently associated with the programmable television controller (100c).

[0503] Both the control option specification (400e) and the second control option specification (400e) are retrieved from their respective storage devices (200g, 200g) and communicated to a collection and reporting system (404b) at a central collection site (404a) in the application infrastructure (103k or 103n).

[0504] The collection and reporting system (404b) then stores a first plurality of control option specifications (404c) in its associated collection storage device (404d). The first plurality of control option specifications (404c) at least includes the control option specification (400e) and the second control option specification (400e).

[0505] Both the control option specification (400e) and the third control option specification (400e) are then retrieved from their respective collection storage devices (404d, 406e) and communicated to an aggregation and reporting system (406b) at a central aggregation site (406a) in the application infrastructure (103k or 103n).

[0506] This retrieval and communication could be executed in a variety of ways, including by an automated aggregation process initiated by the aggregation and reporting system (406b), or by an automated submission process initiated by the collection and reporting system (404b).

[0507] The aggregation and reporting system (406b) then stores a second plurality of control option specifications (406c) in its associated aggregation storage device (406c). The second plurality of control option specifications (406c) at least includes the control option specification (400e) and the third control option specification (400e).

[0508] An adapted application program (300c, 301d, or 302d) is executed by the program processor (200f) in the programmable television controller (100c). Either automatically or in response to a request from the adapted application program (300c, 301d, or 302d), the aggregation and reporting system (406b) retrieves the control option specification (400e) from the aggregation storage device (406d), and communicates control option specification data (406f) to the application program (300c, 301d, or 302d).

[0509] The control option specification data (406f) contains all or part of the control option specification (400e). The adapted application program (300c, 301d, or 302d) then governs its operation to be compliant with the control option specification (400e) for the programmable television controller (100c).

[0510] FIG. 407 shows a TV Control system where a central collection site (404a) and a central aggregation site (406a) are used in conjunction with the TV Control application (400a) and with application providers (300a, 301a, and 302a) to facilitate compliance of adapted application programs (300c, 301d, and 302d) on the programmable television controller (100c).

[0511] FIG. 407 assumes that the television user (400c) has selectively configured (400d) the control options (400b) as illustrated in FIGS. 400 and 401. It is also assumed that a second control option specification (400e) has been stored in a second storage device (200g) in association with a second programmable television controller (not pictured), and that a third control option specification (400e) associated with a third programmable television controller (not pictured) has been stored in a second collection storage device (406e) associated with a second central collection site (not pictured).

[0512] The TV Control application (400a) generates a control option specification (400e) representative of the television user's (400c) selective configuration (400d) of the control options (400b), and stores the control option specification (400e) in an internal storage device (200g) in the programmable television controller (100c). The control option specification (400e) is consequently associated with the programmable television controller (100c).

[0513] Both the control option specification (400e) and the second control option specification (400e) are retrieved from their respective storage devices (200g, 200g) and communicated to a collection and reporting system (404b) at a central collection site (404a) in the application infrastructure (103k or 103n).

[0514] The collection and reporting system (404b) then stores a first plurality of control option specifications (404c) in its associated collection storage device (404d). The first plurality of control option specifications (404c) at least includes the control option specification (400e) and the second control option specification (400e).

[0515] Both the control option specification (400e) and the third control option specification (400e) are then retrieved from their respective collection storage devices (404d, 406e) and communicated to an aggregation and reporting system (406b) at a central aggregation site (406a) in the application infrastructure (103k or 103n).

[0516] The aggregation and reporting system (406b) then stores a second plurality of control option specifications (406c) in its associated aggregation storage device (406c). The second plurality of control option specifications (406c) at least includes the control option specification (400e) and the third control option specification (400e).

[0517] Either automatically or in response to a request from the application provider (300a, 301a, or 302a), the aggregation and reporting system (406b) retrieves the control option specification (400e) from the aggregation storage device (406d), and communicates control option specification data (407a) to the application provider (300a, 301a, or 302a).

[0518] The control option specification data (407a) contains all or part of the control option specification (400e). The application provider (300a, 301a, or 302a) then configures an adapted application program (300c, 301d, 302d) to operate in compliance with the control option specification (400e), and transmits the resulting application program data (407b), possibly along with control option specification data (407a) to the programmable television controller (100c).

[0519] It is also conceivable that the application provider (300a, 301a, or 302a) would choose not to transmit the adapted application program (300c, 301d, or 302d) to the programmable television controller (100c), based on the control option specification data (407a).

[0520] Once transmitted to the programmable television controller (100c) and executed by the program processor (200f), the adapted application program (300c, 301d, or 302d) then governs its operation to be compliant with the control option specification (400e).

[0521] FIG. 408 shows a data claim processing system, where a TV Control application (400a) operates in conjunction with a central registration site (408a) to control or limit the use of user data objects (408d) by an application agent (408f) associated with an adapted interactive television application program (302d).

[0522] FIG. 408 assumes that the television user (400c) has selectively configured (400d) the control options (400b) as illustrated in FIGS. 400 and 401. It is also assumed that the television user (400c) has checked either or both of the user identification data check box (15b) or the user profile data check box (15c) shown in FIG. 15-User Data Options.

[0523] The television user (400c) enters one or more user data objects (408b) in the TV Control application (400a), using the interface screens shown in FIGS. 16, 17 and/or 18. In conjunction with a user registration process, these user data objects (408b) are transmitted to a registration data processing system (408c) at a central registration site (408a) in the application infrastructure (103k or 103n).

[0524] The registration data processing system (408c) responds by generating a unique user identifier (408e) associated with the television user (400c), and transmitting the unique user identifier (408e) back to the TV Control application (400a).

[0525] The registration data processing system (408c) also stores the user data objects (408d) and the user identifier (408e) in a registration storage device (408b), and associates the user identifier (408e) with each of the user data objects (408d). The TV Control application (400a) stores the user identifier (408e) in an internal storage device (200g) in the programmable television controller (100c). Alternatively, the TV Control application might store the user identifier in a removable storage device (204a) or in a local networked device (203b).

[0526] An adapted interactive television application program (302d) is executed on the programmable television controller (100c) by the program processor (200f). The adapted application program (302d) has been configured to submit an authorization request (408g) to the TV Control application (400a) for one or more user data objects (408d) as required to complete a transaction or another request by the television user (400c).

[0527] The authorization request (408g) is presented to the television user in the form illustrated in FIG. 19-Data Distribution Authorization. The screen shown in FIG. 19 could conceivably be generated either by the adapted application program itself (302d) or by the TV Control application (400a).

[0528] If the television user (400c) provides distribution authorization (408h) for one or more of the user data objects (408d) for which authorization was requested (408g), the TV Control application (400a) will the generate one or more data claims (408i) for the user data objects (408d) as authorized, and communicate these data claims (408i) to the adapted application program (302d).

[0529] The data claims (408i) do not contain the user data objects (408d) themselves, but rather contain references to the user data objects (408d) along with the unique user identifier (408e).

[0530] The adapted application program (302d) then communicates the data claims (408i) to an application agent (408f). The application agent could be the application provider (300a, 301a, or 302a), a transaction processor, or any other entity that is responsible for fulfilling the transaction or other request by the television user (400c). The application agent then presents the data claims (408i) to the registration data processing system (408c) at the central registration site (408a).

[0531] If the registration data processing system (408c) is able to authenticate the data claims (408i), it will then communicate one or more distribution terms and conditions (408j) to the application agent (408f). These distribution terms and conditions (408j) pertain to the use and redistribution of the user data objects (408d), and may have been determined in part by the television user (400c).

[0532] The authentication process for data claims can be achieved using well-understood prior art technologies. For example, assume that the registration process includes the generation of both public and private encryption keys for the television user (400c). The television user's (400c) private encryption key would be maintained exclusively by the TV Control application (400a) on behalf of the television user (400c). The television user's (400c) public encryption key would be transmitted to the central registration site (408a). If data claims (408i) are encrypted by the TV Control application (400a) using the television user's (400c) private encryption key, then the registration data processing system can authenticate the data claims (408i) simply by attempting to decrypt them with the television user's (400c) public encryption key. If decryption is successful, the data claims (408i) must have been authorized specifically by the television user (400c).

[0533] If the application agent (408f) accepts (408k) the distribution terms and conditions (408j), then the registration data processing system will retrieve the user data objects (408d) from the registration storage device (408b), and communicate the user data objects (408d) to the application agent (408f).

[0534] The foregoing illustrated embodiments represent only one set of possibilities with regard to architecture and data flows for the invention. It is conceivable to implement other architectures and data flows for the TV Control system while still maintaining the spirit of the present invention. That spirit is to provide television users with a means for maintaining control of their television experiences in the digital television environment, and with a foundation for leveraging the digital television infrastructure for their protection and benefit.

[0535] The flowcharts shown in FIGS. 500-516 provide more detail regarding the operation of the TV Control system.

[0536] For clarity, these process flows are shown from the perspective of a single, specific television user (400c) associated as required with a single established set of audience registry functions. In practice, the TV Control system is ideally implemented across a multitude of television users (400c), which are grouped dynamically into a multitude of local audience subsets (200a), and multiplexed with an interconnected network of audience registries in the application infrastructure (103k or 103n).

[0537] With the exception of FIGS. 510 and 511, each diagram illustrates core functionality for a specific operational aspect of the TV Control system. In FIGS. 510 and 511, the core functionality for data claim processing is distributed across both diagrams. These two diagrams are therefore connected, with connectors being represented by encircled reference numerals.

[0538] A connector with an active inflow automatically activates an identically-numbered connector with an outflow. If it is not apparent from the reference numeral where a connector links to another diagram, a Fig. number is specified adjacent to the connector.

[0539] Other diagrams are connected in this fashion as well; however, connectors between other diagrams are links between distinct operational aspects of the invention. Only two diagrams, FIGS. 500 and 510/511, are completely independent. The remaining diagrams are dependentrelying on flows from connectors with other diagrams. FIGS. 501-509 are dependent at least on FIG. 500, and FIGS. 512-516 are dependent at least on FIG. 510/511.

[0540] Start points in the diagrams are reserved for either selecting a television user or establishing a registry function. End points in the diagrams do not necessarily terminate operationother process flows may still be active. A triangular element in the process flow is a merge point, which requires all inflows to be active before activating the outflow.

[0541] Solid-line arrows represent process flows that are required to fully illustrate the core functionality of the current diagram. Broken-line arrows represent process flows that are non-essential to illustrating the core functionality of the current diagram, although they may be a component of core functionality for another diagram. A solid-line arrow flowing out from a connector or a merge point is only considered required if the flow is active at the connector or merge point.

[0542] A key showing all flowchart elements used for the diagrams in FIGS. 500-516 is presented adjacent to the diagram in FIG. 500.

[0543] Reference numerals from the diagrams in FIGS. 400-408 are intended to tie the following description back to the architecture and data flow diagrams. However, it should be apparent to the reader that the process flows depicted in FIGS. 500-516 can be reasonably applied to alternative architectures and data flows.

[0544] FIG. 500 illustrates process flows for voluntarily adapting application programs (300c, 301d or 302d) to operate in compliance with the control option specification (400e) from a TV Control application (400a).

[0545] The process flow begins at Start (500a). A single outflow from 500a activates a process (500b) for selecting a television user (400c) with a programmable television controller (100c) having a unique identifier PTC1. Note that PTC1 is not the unique identifier itself, but rather a variable used to represent the unique identifier.

[0546] Process step 500b has two outflows. The first outflow activates a process (500c) for selecting a user storage means (200g) associated with the television user (400c), which subsequently activates another process (500d) for selecting a television control option specification means (400a) for the television user (400c).

[0547] The second outflow from process step 500b activates a process (500k) for selecting an application (300c, 301d, or 302d) intended for operation on PTC1. Process step 500k can be repeated indefinitely.

[0548] Active outflows from process steps 500d and 500k merge to create an outflow that activates a process (500m) for adapting the application (300c, 301d, or 302d) to be compliant with control option specifications (400e), based on the control option specification means (400a) selected in process step 500d. Optional outflows from 500k activate connectors (501a, 504g) in FIGS. 501 and 504. Optional outflows from 500d activate connectors (502a, 504s) in FIGS. 502 and 504.

[0549] An outflow from process step 500m activates a process (500n) for transmitting the adapted application program (300c, 301d, or 302d) to PTC1 for operation. Process step 500n can be repeated indefinitely. Optional outflows from process step 500m activate connectors (507a, 508a, 509a, 503e) to the diagrams in FIGS. 507, 508, 509 and 503.

[0550] Another outflow from process step 500d activates a process (500e) for presenting control options (400b) for PTC1 to the television user (400c). Process step 500e, which captures control options for PTC1 (input 500f) can be repeated indefinitely.

[0551] A single outflow from process step 500e activates a process (500g) for capturing the television user's (400c) selective configuration (400d, input 500h) of the control options (400b).

[0552] A single outflow from process step 500g activates a process (500i) for generating a control option specification (400e) per the television user's (400c) selective configuration (400d). Process step 500i can also be activated by an outflow from connector 502g, which is linked to FIG. 502.

[0553] A single outflow from process step 500i activates a process (500j) for storing the control option specification (400e) in the user storage means (200g) and associating the control option specification with PTC1. The application has now been adapted and transmitted to PTC1 for operation in process step 500n, where it has access to the control option specification (400e) captured and stored in process steps 500g, 500i and 500j.

[0554] Active outflows from process steps 500j and 500n merge to create an outflow that activates a process (500o) for retrieving the control option specification (400e) for PTC1 from the user storage means (200g). Process step 500o can also be activated if active flows merge from process step 500j and connector 503r (FIG. 503), or from process step 500j and connector (504z).

[0555] Optional outflows from process step 500j activate connectors (501c, 505d, 503m, 504u, 507b) to the diagrams in FIGS. 501, 505, 503, 504 and 507. Additionally, active outflows from 500j are required to activate a merge with process flows from connectors (503r, 504z) in the diagrams in FIGS. 503 and 504.

[0556] Optional outflows from process step 500n activate connectors (505h, 506h) in the diagrams in FIGS. 505 and 506.

[0557] A single outflow from process step 500o activates a process (500p) for generating control option specification data (400g) per the control option specification (400e). A single outflow from process step 500p subsequently activates a process (500q) for communicating the control option specification data (400g) to the adapted application program (300c, 301d, or 302d).

[0558] A single outflow from process step 500p activates a decision (500r) regarding whether the adapted application program (300c, 301d, or 302d) is authorized to operate on PTC1, based on the control option specification (400e). Decision step 500r can also be activated by an outflow either from connector 5050 (linked to the diagram in FIG. 505), or from connector 506o (linked to the diagram in FIG. 506).

[0559] If the answer to decision step 500r is NO, the adapted application program (300c, 301d, or 302d) terminates at End point 500s. If YES, an outflow from decision step 500r activates another decision (500t) regarding whether any of the application's intended behaviors are authorized on PTC1, based on the control option specification (400e).

[0560] If the answer to decision step 500t is NO, the adapted application program (300c, 301d, or 302d) terminates at End point 500u. If YES, an outflow from decision step 500t activates a process (500v) for executing the application's authorized behaviors on PTC1. Process step 500v can also be activated by an outflow from connector 507o, which is linked to the diagram in FIG. 507.

[0561] Finally, once the adapted application program (300c, 301d, or 302d) has completed execution of its authorized behaviors on PTC1 (500v), the application terminates at End point 500w.

[0562] FIG. 501 illustrates process flows for enforcing compliance of non-adapted application programs (300c, 301d, or 302d) with the control option specification (400e) from a TV Control application (400a).

[0563] The process flow begins with an active outflow from connector 501a (linked to the diagram in FIG. 500), which indicates that an application (300c, 301d, or 302d) has been selected for operation on PTC1. An outflow from connector 501a activates a process (501b) for transmitting the non-adapted application (300c, 301d, or 302d) to. PTC1 for operation, and executing the application. Process step 501b can be repeated indefinitely.

[0564] Active outflows from process step 501b and from connector 501c merge to create an outflow that activates a process (501d) for retrieving the control option specification (400e) for PTC1 from the user storage means (200g). An active outflow from connector 501c indicates that the control option specification (400e) has been stored in the user storage means (200g).

[0565] A single outflow from process step 501d activates a process (501e) for monitoring operation of the non-adapted application (300c, 301d, or 302d) on PTC1 for non-complaint application events, based on the control option specification (400e). The process step in 501e can also be activated by outflows from 501f or 501h (described below).

[0566] A single outflow from process step 501e activates a decision (501f) regarding whether any non-compliant application events have been detected. In practice, the decision step 501f is a sub-component of process step 501e; however, the two have been separated for clarity.

[0567] If the answer to decision step 501f is NO, process step 501e is continued. If the answer is YES, an outflow from decision step 501f activates another decision (501g) regarding whether the non-compliant application events can be blocked.

[0568] If the answer to decision step 501g is YES, an outflow from decision step 501g activates a process (501h) for blocking the non-complaint application event that was detected by process step 501e. Process step 501h repeats indefinitely. An outflow from process step 501h activates process step 501e (indicating that monitoring also continues indefinitely in the interest of detecting additional non-compliant application events).

[0569] If the answer to decision step 501g is NO, an outflow from decision step 501g activates another decision (501i) regarding whether the non-adapted application (300c, 301d, or 302d) can be terminated.

[0570] If the answer to decision step 501i is NO, the current process flow terminates at End point 501j. If the answer to decision step 501i is YES, an outflow activates a process (501k) for terminating operation of the non-adapted application (300c, 301d, or 302d), after which the current process flow terminates at End point 501m.

[0571] FIG. 502 illustrates process flows for initiating, verifying and fulfilling incentives for the television user (400c) in conjunction with the TV Control system.

[0572] The process flow begins with an active outflow from connector 502a (linked to the diagram in FIG. 500), which indicates that a control option specification means (400a) has been selected for the television user (400c). The outflow from 502a activates a process (502b) for associating one or more control options (400b) with an incentive for the television user (400c). Process step 502b captures input 500f (control options for PTC1) and input 502c (incentives).

[0573] A single outflow from process step 502b activates a process (502d) for presenting the control options (400b, input 500f) and their associated incentives (input 502c) for PTC1 to the television user (400c). Process step 502d can be repeated indefinitely.

[0574] A single outflow from process step 502d activates a process (502e) for capturing the television user's (400c) selective configuration (400d, input 502f) of the control options (400b, input 500f), one or more of which may have been associated with incentives (input 502c) in process step 502b. An outflow from process step 502e activates connector 502g (linked to the diagram in FIG. 500), which goes on to activate generation of the control option specification (400e, process step 500i).

[0575] Another outflow from process 502e activates a decision (502h) regarding whether the selective configuration (400d, input 502f) of the control options (400b, input 500f) entitles the television user (400c) to participate in any incentive programs.

[0576] If the answer to decision step 502h is NO, the current process terminates at End point 502i. If the answer to decision 502h is YES, an outflow from 502h activates a process (502j) for tracking accrual of the incentives by the television user (400c). Process step 502j repeats indefinitely unless the selective configuration disqualifies the television user from participation in specific incentive programs (not pictured).

[0577] Once accrual tracking (502j) has commenced, optional outflows can at any time activate a process (502o) wherein the television user (400c) attempts to claim the incentives, or a process (502k) for reporting accrual of the incentives to the television user (400c).

[0578] An outflow from process step 502o activates a decision (502p) regarding whether the television user (400c) has accrued the claimed incentivesbasically checking the claim against the accrual tracking in process step 502j.

[0579] If the answer to decision step 502p is NO, the current process (initiated by optional process step 502o) is terminated at End point 502q. If the answer is YES, an outflow from decision step 502p activates a process (502n) for delivering the claimed and accrued incentives to the television user (400c), and the current process is terminated at End point 502r.

[0580] An optional outflow from process step 502k activates a process (502m) wherein the television user (400c) chooses to claim the incentives reported as having been accrued in process step 502k. An outflow from process step 502m activates the process (502n) for delivering the accrued, reported and claimed incentives to the television user (400c), and the current process is terminated at End point 502r.

[0581] FIG. 503 illustrates process flows for using an application certification provider (402a) in conjunction with the TV Control system to ensure compliance of adapted application programs (300c, 301d, or 302d) with the control option specification (400e) from a TV Control application (400a).

[0582] The process flow begins at Start (503a). A single outflow from Start 503a activates a process (503b) for establishing an application certification provider (402a). A single outflow from process step 503b activates a process (503c) for determining certification criteria for application programs, and consequently capturing input 503d (certification criteria).

[0583] Active outflows from process step 503c and connector 503e merge to create an outflow that activates a process (503f) wherein a request is issued for certification of an adapted application (300c, 301d, or 302d) by the application certification provider (402a). The request is issued by either an application provider or an application agent (not pictured). The active outflow from connector 503e (linked to the diagram in FIG. 500) indicates that the application program has been adapted (500m) to be compliant with control option specifications (400e).

[0584] In response to the request issued in process step 503f, an outflow activates a process (503g) for analyzing the operation of the adapted application (300c, 301d, or 302d) on a certification analysis device (402b) representative of PTC1. In practice, such a device would simulate operation of the application on many different programmable television controllers (100c).

[0585] An outflow from process step 503g activates a decision (503h) regarding whether the operation of the adapted application program (300c, 301d, or 302d) on the certification analysis device (402b) was determined to be compliant with control option specifications (400e).

[0586] If the answer to decision step 503h is NO, the current process terminates at End point 503i and no certification is granted. If the answer to decision step 503h is YES, an outflow activates a process (503j) for granting a compliance certificate (402e, input 503k) to the adapted application program (300c, 301d, or 302d).

[0587] Active outflows from process step 503j and connector 503m merge to create an outflow that activates a process (503n) for transmitting the adapted application program (300c, 301d, or 302d) and the compliance certificate (402e) to PTC1 for operation. An active outflow from connector 503m (linked to the diagram in FIG. 500) indicates that the control option specification (400e) has been stored (500j) in the user storage means (200g).

[0588] A single outflow from process step 503n activates a decision (503o) regarding whether the compliance certificate (402e) can be authenticated. If the answer is NO, the application is not permitted to operate on PTC1, and the current process terminates at End point 503p. If the answer is YES, an outflow from decision step 503o activates a process (503q) for permitting operation of the adapted application program (300c, 301d, or 302d) on PTC1.

[0589] Three alternative outflows from process step 503q activate connectors 503r, 503s or 503t (linked to the diagrams in FIGS. 500, 505, and 506, respectively). Connectors 503r, 503s and 503t represent alternative methods for the adapted application program (300c, 301d, or 302d) to access the control option specification (400e) for PTC1 as process flow continues.

[0590] FIG. 504 illustrates process flows for using a commercial registration provider (403a) in conjunction with the TV Control system to ensure compliance of adapted application programs (300c, 301d, or 302d) with the control option specification (400e) from a TV Control application (400a).

[0591] The process flow begins at Start (504a). A single outflow from Start 504a activates a process (504b) for establishing a commercial registration provider (403a). A single outflow from process step 504b activates a process (504c) for specifying registration terms and conditions (403g)including a requirement for commercially-registered application providers (300a, 301a, or 302a) to adapt their applications to be compliant with control option specifications (400e). Process 504c consequently captures input 504d (registration terms).

[0592] A single outflow from process step 504c activates a process (504e) for determining commercial registration criteria (input 504f) for application providers (300a, 301a, or 302a).

[0593] An additional process flow begins with an active flow at connector 504g (linked to the diagram in FIG. 500), which indicates that an application (300c, 301d, or 302d) intended for operation on PTC1 has been selected. An active flow at connector 504g activates a process (504h) for identifying the application provider (300a, 301a, or 302a) for the application (300c, 301d, or 302d).

[0594] Active outflows from process steps 504e and 504h merge to create an outflow that activates a process (504i) wherein a request is issued for commercial registration of the application provider (300a, 301a, or 302a) by the commercial registration provider (403a).

[0595] In response to the request issued in process step 504i, an outflow activates a process (504j) for acquiring or accessing data (input 504k) pertaining to the application provider (300a, 301a, or 302a) for testing the registration criteria (input 504f). An outflow from process step 504j activates a decision (504m) regarding whether the application provider (300a, 301a, or 302a) satisfies the registration criteria (input 504f).

[0596] If the answer to decision step 504m is NO, the current process terminates at End point 504n and no commercial registration is granted. If the answer to decision step 504m is YES, an outflow activates a process (504o) for requesting acceptance, by the application provider (300a, 301a, or 302a), of registration terms and conditions (403g, input 504d).

[0597] A single outflow from process step 504o activates a decision (504p) regarding whether the application provider (300a, 301a, or 302a) has accepted the registration terms and conditions (403g, input 504d).

[0598] If the answer to decision step 504p is NO, the current process flow terminates at End point 504q and no commercial registration is granted. If the answer is YES, an outflow from decision step 504p activates a process (504r) for granting a commercial registration (403i) to the application provider (300a, 301a, or 302a).

[0599] Active outflows from process step 504r and connector 504s merge to create an outflow that activates a process (504t) for adapting the application program (300c, 301d,. or 302d) to be compliant with control option specifications (400e), pursuant to the registration terms and conditions (403g, input 504d) accepted by the application provider (300a, 301a, or 302a). An active outflow from connector 504s (linked to the diagram in FIG. 500) indicates that a control option specification means (400a) has been selected for the television user (400c).

[0600] Active outflows from process step 504t and connector 504u merge to create an outflow that activates a process (504v) for transmitting the adapted application program (301c, 301d, 302d) and the commercial registration (403i) to PTC1 for operation. An active outflow from connector 504u (linked to the diagram in FIG. 500) indicates that the control option specification (400e) has been stored (500j) in the user storage means (200g).

[0601] A single outflow from process step 504v activates a decision (504w) regarding whether the commercial registration (403i) is verified as authentic. If the answer is NO, the current process terminates at End point 504 and the application is not permitted to operate on PTC1. If the answer is YES, an outflow from decision step 504w activates a process (504y) for permitting operation of the adapted application program (301c, 301d, 302d) on PTC1.

[0602] Three alternative outflows from process step 504y activate connectors 504z, 504aa or 504ab (linked to the diagrams in FIGS. 500, 505, and 506, respectively). Connectors 504z, 504aa and 504ab represent alternative methods for the adapted application program (300c, 301d, or 302d) to access the control option specification (400e) for PTC1 as process flow continues.

[0603] FIG. 505 illustrates process flows for using a central collection site (404a) to communicate control option specification data (404e) to adapted application programs (300c, 301d, or 302d).

[0604] The process flow begins at Start (505a). A single outflow from Start 505a activates a process (505b) for establishing a central collection site (404a). A single outflow from process step 505b activates a process (505c) for providing a collection storage means (404d) at the central collection site (404a).

[0605] Active outflows from process step 505c and connector 505d merge to create an outflow that activates a process (505e) for retrieving the control option specification (400e) for PTC1 from the user storage means (200g). An active outflow from connector 505d (linked to the diagram in FIG. 500) indicates that the control option specification (400e) has been stored (500j) in the user storage means (200g).

[0606] A single outflow from process step 505e activates a process (505f) for communicating the control option specification (400e) to the central collection site (404a). A single outflow from process step 505f activates a process (505g) for storing the control option specification (400e) in the collection storage means (404d).

[0607] Once the control option specification (400e) has been stored in the collection storage means (404d), two optional outflows from process step 505g activate connectors 506d and 508c (linked to the diagrams in FIGS. 506 and 508). These optional flows further communicate the control option specification (400e) to a central aggregation site (406a), or to an application provider (300a, 301a, or 302a), respectively.

[0608] An additional process flow begins with an active flow at any of the connectors 504aa, 503s, or 505h (linked to the diagrams in FIGS. 504, 503, and 500, respectively). An active outflow from any of these connectorsindicating that an adapted application program (300c, 301d, or 302d) has been transmitted to PTC1 for operationactivates a process (505i) for identifying the central collection site (404a).

[0609] A single outflow from process step 505i activates a process (505j) wherein the adapted application program (300c, 301d, or 302d) requests the control option specification (400e) for PTC1 from the central collection site (404a).

[0610] Active outflows from process steps 505g and 505j merge to create an outflow that activates a process (505k) for retrieving the control option specification (400e) for PTC1 from the collection storage means (404d). A single outflow from process step 505k activates a process (505m) for generating control option specification data (404e) based on the control option specification (400e).

[0611] A single outflow from process step 505m activates a process (505n) for communicating the control option specification data (404e) to the adapted application program (300c, 301d, or 302d). A single outflow from process step 505n activates connector 505o (linked to the diagram in FIG. 500), which will lead to decisions (500r, 500t) regarding whether the adapted application (300c, 301d, or 302d) can operate on PTC1, based on the control option specification data (404e).

[0612] FIG. 506 illustrates process flows for using a central aggregation site (406a) to communicate control option specification data (406f) to adapted application programs (300c, 301d, or 302d).

[0613] The process flow begins at Start (506a). A single outflow from Start 506a activates a process (506b) for establishing a central aggregation site (406a). A single outflow from process step 506b activates a process (506c) for providing an aggregation storage means (406d) at the central aggregation site (406a).

[0614] Active outflows from process step 506c and connector 506d merge to create an outflow that activates a process (506e) for retrieving the control option specification (400e) for PTC1 from the collection storage means (404d). An active outflow from connector 506d (linked to the diagram in FIG. 505) indicates that the control option specification (400e) has been stored (505g) in the collection storage means (404d).

[0615] A single outflow from process step 506e activates a process (505f) for communicating the control option specification (400e) to the central aggregation site (406a). A single outflow from process step 506f activates a process (506g) for storing the control option specification (400e) in the aggregation storage means (406d).

[0616] Once the control option specification (400e) has been stored in the aggregation storage means (406d), an optional outflow from process step 506g activates connector 509c (linked to the diagram in FIG. 509). This optional flow further communicates the control option specification (400e) to an application provider (300a, 301a, or 302a).

[0617] An additional process flow begins with an active flow at any of the connectors 504ab, 503t, or 506h (linked to the diagrams in FIGS. 504, 503, and 500, respectively). An active outflow from any of these connectorsindicating that an adapted application program (300c, 301d, or 302d) has been transmitted to PTC1 for operationactivates a process (506i) for identifying the central aggregation site (406a).

[0618] A single outflow from process step 506i activates a process (506j) wherein the adapted application program (300c, 301d, or 302d) requests the control option specification (400e) for PTC1 from the central aggregation site (406a).

[0619] Active outflows from process steps 506g and 506j merge to create an outflow that activates a process (506k) for retrieving the control option specification (400e) for PTC1 from the aggregation storage means (406d). A single outflow from process step 506k activates a process (506m) for generating control option specification data (406f) based on the control option specification (400e).

[0620] A single outflow from process step 506m activates a process (506n) for communicating the control option specification data (406f) to the adapted application program (300c, 301d, or 302d). A single outflow from process step 506n activates connector 506o (linked to the diagram in FIG. 500), which will lead to decisions (500r, 500t) regarding whether the adapted application (300c, 301d, or 302d) can operate on PTC1, based on the control option specification data (406f).

[0621] FIG. 507 illustrates process flows for communicating control option specification data (404e) from the user storage means (200g) to an application provider (300a, 301a, or 302a) to ensure compliant operation of adapted application programs (300c, 301d, or 302d) on PTC1.

[0622] Process flow begins with active outflows from connectors 507a and 507b, which merge to create an outflow that activates a process (507c) for identifying the application provider (300a, 301a, or 302a) for the adapted application (300c, 301d, or 302d). Active outflows from connectors 507a and 507b (each linked to the diagram in FIG. 500) indicate that the application has been adapted to be compliant with control option specifications (400e), and that the control option specification (400e) has been stored in the user storage means (200g).

[0623] A single outflow from process step 507c activates a process (507d) wherein the application provider (300a, 301a, or 302a) requests the control option specification (400e) from the user storage means (200g).

[0624] A single outflow from process step 507d activates a process (507e) for retrieving the control option specification (400e) for PTC1 from the user storage means (200g). A single outflow from process step 507e activates a process (507f) for generating control option specification data (400g) based on the control option specification (400e). A single outflow from process step 507f activates a process (507g) for communicating the control option specification data (400g) to the application provider (300a, 301a, or 302a).

[0625] A single outflow from process step 507g activates a decision (507h) regarding whether the adapted application program (300c, 301d, or 302d) is authorized to operate on PTC1, based on the control option specification (400e). Decision step 507h can also be activated by an outflow either from connector 508h (linked to the diagram in FIG. 508), or from connector 509h (linked to the diagram in FIG. 509).

[0626] If the answer to decision step 507h is NO, the current process terminates at End point 507i. If YES, an outflow from decision step 507h activates another decision (507j) regarding whether any of the application's intended behaviors are authorized on PTC1, based on the control option specification (400e).

[0627] If the answer to decision step 507j is NO, the current process terminates at End point 507k. If YES, an outflow from decision step 507j activates a process (507m) for configuring the adapted application program (300c, 301d, or 302d) specifically for operation on PTC1, based on the control option specification data (400g).

[0628] A single outflow from process step 507m activates a process (507n) for transmitting the adapted, configured application program (300c, 301d, or 302d) to PTC1 for operation. A single outflow from process step 507n activates connector 507o (linked to the diagram in FIG. 500), which leads to execution (500v) of the application's (300c, 301d, or 302d) authorized behaviors on PTC1.

[0629] FIG. 508 illustrates process flows for communicating control option specification data (405a) from the collection storage means (404d) to an application provider (300a, 301a, or 302a) to ensure compliant operation of adapted application programs (300c, 301d, or 302d) on PTC1.

[0630] Process flow begins with an active outflow from connector 508a (linked to the diagram in FIG. 500), which indicates that the application has been adapted (500m) to be compliant with control option specifications (400e). An active outflow from connector 508a activates a process (508b) for identifying the application provider (300a, 301a, or 302a) for the adapted application (300c, 301d, or 302d).

[0631] Active outflows from process step 508b and connector 508c merge to create an outflow that activates a process (508d) wherein the application provider (300a, 301a, or 302a) requests the control option specification (400e) from the collection storage means (404d). An active outflow from connector 508c (linked to the diagram in FIG. 505) indicates that the control option specification (400e) has been stored (505g) in the collection storage means (404d).

[0632] A single outflow from process step 508d activates a process (508e) for retrieving the control option specification (400e) for PTC1 from the collection storage means (404d). A single outflow from process step 508e activates a process (508f) for generating control option specification data (405a) based on the control option specification (400e). A single outflow from process step 508f activates a process (508g) for communicating the control option specification data (405a) to the application provider (300a, 301a, or 302a).

[0633] A single outflow from process step 508g activates connector 508h (linked to the diagram in FIG. 507), which will lead to decisions (507h, 507j) regarding whether the adapted application (300c, 301d, or 302d) can operate on PTC1, based on the control option specification data (405a).

[0634] FIG. 509 illustrates process flows for communicating control option specification data (407a) from the aggregation storage means (406d) to an application provider (300a, 301a, or 302a) to ensure compliant operation of adapted application programs (300c, 301d, or 302d) on PTC1.

[0635] Process flow begins with an active outflow from connector 509a (linked to the diagram in FIG. 500), which indicates that the application has been adapted (500m) to be compliant with control option specifications (400e). An active outflow from connector 509a activates a process (509b) for identifying the application provider (300a, 301a, or 302a) for the adapted application (300c, 301d, or 302d).

[0636] Active outflows from process step 509b and connector 509c merge to create an outflow that activates a process (509d) wherein the application provider (300a, 301a, or 302a) requests the control option specification (400e) from the aggregation storage means (406d). An active outflow from connector 509c (linked to the diagram in FIG. 506) indicates that the control option specification (400e) has been stored (506g) in the aggregation storage means (406d).

[0637] A single outflow from process step 509d activates a process (509e) for retrieving the control option specification (400e) for PTC1 from the aggregation storage means (406d). A single outflow from process step 509e activates a process (509f) for generating control option specification data (407a) based on the control option specification (400e). A single outflow from process step 509f activates a process (509g) for communicating the control option specification data (407a) to the application provider (300a, 301a, or 302a).

[0638] A single outflow from process step 509g activates connector 509h (linked to the diagram in FIG. 507), which will lead to decisions (507h, 507j) regarding whether the adapted application (300c, 301d, or 302d) can operate on PTC1, based on the control option specification data (407a).

[0639] FIG. 510 illustrates process flows for preparing to process data claims (408i) for user data objects (408d). FIG. 510 combines with FIG. 511 to illustrate process flows for a complete data claim processing system.

[0640] Process flow begins with Start (510a). One outflow from Start 510a activates a process (510b) for establishing a central registration provider (408a). Another outflow from Start 510a activates a process (510m) for selecting a television user (400c) with a programmable television controller (100c).

[0641] An outflow from process step 510b activates a process (510c) for selecting a registration storage means (408b) associated with the central registration provider (408a). An optional outflow from process step 510b activates connector 515a (linked to the diagram in FIG. 515), which leads to the establishment of agent registration capability.

[0642] An outflow from process step 510c activates a process (510d) for specifying distribution terms and conditions (408j, input S 10e) for user data objects (408d) provided to application agents (408f).

[0643] A single outflow from process step 510d activates a process (510f) wherein the television user (400c) provides at least one user data object (408d, input 510g) to the central registration provider (408a). Process step 510f can also be activated by an active outflow from connector 512h (connected to the diagram in FIG. 512), which indicates that the television user (400c) has participated in the specification of distribution terms and conditions (408j, input 512g).

[0644] A single outflow from process step 510f activates a process (510h) for storing the user data objects (408d, input 510g) in the registration storage means (408b). A single outflow from process step 510h activates a process (510i) for generating a unique identifier (408e) for the television user (400d).

[0645] A single outflow from process step 510i activates a process (510j) for storing the unique identifier (408e) in both the registration storage means (408b) and the user storage means (200g). A single outflow from process step 510j activates a process (510k) for associating the unique identifier (408e) with the user data objects (408d) in the registration storage means (408b).

[0646] Two distinct outflows from process step 510k activate connectors 511b and 516b (linked to the diagrams in FIGS. 511 and 516, respectively), leading to two alternative methods for processing of data claims (408i) for the user data objects (408d).

[0647] Meanwhile, two distinct outflows emanate from process step 510m. One of these outflows activates a process (510n) for selecting a user storage means (200g) associated with the television user (400c). A single outflow from process step 510n activates a process (510o) for providing a data claim authorization means (see FIG. 19) for the television user (400c).

[0648] Active outflows from process steps 510o and 510c merge to create an optional outflow that activates connector 512a (linked to the diagram in FIG. 512), which leads to the television user's (400c) participation in the specification of distribution terms and conditions (408j, input 512g).

[0649] Another optional outflow from process step 510o activates connector 515s (linked to the diagram in FIG. 515), which leads to the adaptation of an application program (300c, 301d, or 302d) to be compliant with user data claims, subsequent to the registration of an application agent (408f).

[0650] The second outflow from process step 510m activates a process (510p) for selecting an application program (300c, 301d, or 302d) intended for operation on the programmable television controller (100c). Process step 510p can be repeated indefinitely. An optional outflow from process step 510p activates connector 515g (linked to the diagram in FIG. 515), which leads to the identification of an application agent (408f) for the application program (300c, 301d, or 302d).

[0651] Active outflows from process steps 510o and 510p merge to create an outflow that activates a process (510q) for adapting the application (300c, 301d, or 302d) to be compliant with user data claims (408i). A single outflow from process step 510q activates connector 511a (linked to the diagram in FIG. 511), which leads to the authorization and processing of user data claims (408i).

[0652] FIG. 511 illustrates process flows for the authorization and processing of user data claims (408i). FIG. 511 combines with FIG. 510 to illustrate process flows for a complete data claim processing system.

[0653] Process flow begins with active outflows from connectors 511a and 511b (linked to the diagram in FIG. 510), which indicates that user data objects (408d) and the unique user identifier (408e) have been exchanged between the television user (400c) and the central registration provider (408a), and that the application program (300c, 301d, or 302d) has been adapted to be compliant with user data claims (408i).

[0654] Active outflows from connectors 511a and 511b merge to create an outflow that activates a process (511c) wherein the adapted application program (300c, 301d, or 302d) solicits authorization (408h, see FIG. 19) from the television user (400c) to receive one or more specific user data objects (408d).

[0655] A single outflow from process step 511c activates a decision (511d) regarding whether the television user (400c) has provided authorization (408h) to the adapted application program (300c, 301d, or 302d) to receive the user data objects (408d).

[0656] If the answer to decision step 511d is NO, the current process flow terminates at End point 511e, and no data claims (408i) are generated. If the answer is YES, an outflow from decision step 511d activates a process (511f) for retrieving the unique user identifier (408e) from the user storage means (200g).

[0657] A single outflow from process step 511f activates a process (511g) for generating a data claim for the specific user data objects (408d) that have been authorized, using the unique user identifier (408e). A single outflow from process step 511g activates a process (511h) for communicating the data claim (408i) to the adapted application program (300c, 301d, or 302d).

[0658] A single outflow from process step 511h activates a process (511i) wherein an application agent (408f) associated with the adapted application (300c, 301d, or 302d) presents the data claim (408i) to the central registration provider (408a).

[0659] A single outflow from process step 511i activates a decision (511j) regarding whether the data claim (408i) is determined to be authentic (please see the description for FIG. 408). If the answer to decision step 511j is NO, the current process terminates at End point 511k and no user data objects (408d) are distributed. If the answer is YES, an outflow from decision step 511j activates a process (511m) for requesting that the application agent (408f) accept the distribution terms and conditions (408j, input 510e).

[0660] An optional outflow from decision step 511j activates connector 513a (linked to the diagram in FIG. 513), which leads to the reporting of authentication results to the television user (400c).

[0661] A single outflow from process 511m activates a decision (511n) regarding whether the application agent (408f) has accepted the distribution terms and conditions (408j, input 510e). If the answer to decision step 51 in is NO, the current process terminates and no user data objects (408d) are distributed. If the answer is YES, an outflow from decision step 511n activates a process (511p) for retrieving the user data object(s) (408d) from the registration storage means (408b).

[0662] An optional outflow from decision step 511n activates connector 514a (linked to the diagram in FIG. 514), which leads to the reporting of data claim processing results to the television user (400c).

[0663] A single outflow from process step 511p activates a process (511q) for communicating the user data object(s) (408d) to the application agent (408f). A single outflow from process step 511q causes the process flow to conclude at End point 511r.

[0664] FIG. 512 shows a television user (400c) participating in the specification of distribution terms and conditions (408j, input 512g) for user data objects (408d).

[0665] Process flow begins with an active outflow from connector 512a (linked to the diagram in FIG. 510), which indicates that the central registration provider (408a) and registration storage means (408b) have been established, and that a data claim authorization means (see FIG. 19) has been provided to the television user (400c).

[0666] An active outflow from connector 512a activates a process (512b) for presenting one or more distribution terms options (input 512c) to the television user (400c). A single outflow from process step 512b activates a process (512d) wherein the television user selectively configures (input 512e) the distribution terms options (input 512c).

[0667] A single outflow from process step 512d activates a process (512f) for specifying distribution terms and conditions (408j, input 512g) based on the television user's (400c) selective configuration (512e). A single outflow from process step 512f activates connector 512h (linked to the diagram in FIG. 510), which leads to the exchange of user data objects (408d) and the user identifier (408e) between the television user (400c) and the central registration provider (408a).

[0668] FIG. 513 illustrates process flows for reporting of data claim (408i) authentication results to the television user (400c). Process flow begins with an active outflow from connector 513a (linked to the diagram in FIG. 511), which indicates that data claim authentication has been attempted. The outflow from connector 513a activates a process (513b) for reporting results of data claim authentication to the television user (400c). A single outflow from process step 513b concludes the current process flow at End point 513c.

[0669] FIG. 514 illustrates process flows for reporting of data claim (408i) processing results to the television user (400c). Process flow begins with an active outflow from connector 514a (linked to the diagram in FIG. 511), which indicates that data claim processing has commenced. The outflow from connector 514a activates a process (514b) for reporting results of data claim processing to the television user (400c). A single outflow from process step 514b concludes the current process flow at End point 514c.

[0670] FIG. 515 illustrates process flows for registration of application agents (408f) pursuant to the expedited processing of user data claims (408i).

[0671] Process flow begins with an active outflow from connector 515a (linked to the diagram in FIG. 510), indicating that a central registration provider (408a) has been established for registration of television users (400c). An active outflow from connector 515a activates a process (515b) for establishing an agent registration provider, and associating the agent registration provider with the user registration provider (408a).

[0672] A single outflow from process step 515b activates a process (515c) for specifying agent registration terms and conditions (input 515d), which at least include a requirement for application agents (408f) to comply with data distribution terms and conditions (408j, input 510e or 512g). A single outflow from process step 515c activates a process (515e) for determining registration criteria (input 515f) for application agents (408f).

[0673] An additional process flow begins with an active outflow from connector 515g (connected to the diagram in FIG. 510), which indicates that an application program (300c, 301d, or 302d) has been selected for operation on the programmable television controller (100c). An active outflow from connector 515g activates a process (515h) for identifying an application agent (408f) for the application program (300c, 301d, or 302d).

[0674] Active outflows from process steps 515e and 515h merge to create an outflow that activates a process (515i) wherein a request is issued for registration of the application agent (408f) by the agent registration provider.

[0675] A single outflow from process step 55i activates a process (515j) for acquiring or accessing data (input 515k) pertaining to the application agent (408f), pursuant to testing the agent registration criteria. A single outflow from process step 515j activates a decision (515m) regarding whether the application agent (408f) has satisfied the registration criteria (input 515f).

[0676] If the answer to decision step 515m is NO, the current process terminates at End point 515n, and no agent registration is granted. If the answer is YES, an outflow from decision step 515m activates a process (515o) for requesting acceptance of the agent registration terms and conditions (input 515d) by the application agent (408f).

[0677] A single outflow from process step 515o activates a decision (515p) regarding whether the application agent (408f) has accepted the registration terms and conditions (input 515d). If the answer to decision step 515p is NO, the current process terminates at End point 515q, and no agent registration is granted. If the answer is YES, an outflow from decision step 515p activates a process (515r) for granting an agent registration to the application agent (408f).

[0678] Active outflows from process step 515r and connector 515s merge to create an outflow that activates a process (515t) for adapting the application program (300c, 301d, or 302d) to be compliant with user data claims (408i). An active outflow from connector 515s (linked to the diagram in FIG. 510) indicates that a data claim authorization means (see FIG. 19) has been provided for the television user (400c).

[0679] A single outflow from process step 515t activates connector 516a (linked to the diagram in FIG. 516), which leads to the authorization and processing of user data claims (408i) in conjunction with a registered application agent.