Architecture for access over a network to pay-per-view information

[0002] The present invention is an architecture for servers implementing a system providing access over a network to pay-per-view information. More particularly, the present invention is a highly distributed architecture allowing refundable purchases of access to pay-per-view information over a network.

[0003] Co-owned U.S. Pat. No. 5,930,777, entitled “Method of Charging for Pay-Per-Access Information Over a Network,” issued Jul. 7, 1999; and U.S. patent application Ser. No. 08/893,503, entitled “Bandwidth-Preserving Method of Charging for Pay-Per-Access Information on a Network,” filed Jul. 11, 1997, disclose different protocols for providing access over a network to pay-per-view information. These applications do not provide an architecture for a system implementing access, nor do these applications disclose or suggest a means of providing for a refund of a purchase of access when a consumer is dissatisfied. In addition, neither of these applications specifically addresses how to keep a consumer who has purchased information from providing the address of that information to others. The present invention provides an architecture for a system implementing purchases and refunds of access over a network, such as the Internet, of pay-per-view information, and does so in a way that allows for scaling, i.e. natural growth in the system in response to growth and demand.

[0004] To describe the present invention in the context of the Internet, this specification uses some standard Internet terminology associated with Web documents and transport protocols. Hypertext markup language (html) is a format used by most documents on the World Wide Web (W³). A uniform resource locator (URL) is a Web address, which uniquely identifies the location of a particular document (information-bearing page) on the network. A hypertext transfer protocol (http) is the standard protocol used to retrieve and view Web documents. A common gateway interface (cgi) is a Web object that when referenced executes a program at a destination address, and returns some data or a program-generated html document. An extended URL (also called a cgi-extended URL) is a Web address that is said to be extended because of having data used as input by a cgi program at a destination address. An example of an extended URL is

[0005] http://www.site.com?data=3991772391.

[0006] The present invention is a highly-distributed architecture of servers on a network for implementing a system of pay-per-view access over the network. These servers operate independently but cooperate to provide for both the payment for access to pay-per-view information as well as a refund when a customer is dissatisfied. The architecture is said to be distributed because different tasks performed by the system, such as collecting payment or offering a refund, reside on different servers, acting as independent agents.

[0007] The architecture includes four kinds of servers, each having a different role. All of the servers can be owned by a single entity, called here a broker. As will be explained below, a consumer interested in purchasing access to information provided by a vendor is directed to a price tag server, which further describes the information to the consumer and enables the consumer to purchase the information or decline the offer for sale. If the consumer decides to purchase the information, the consumer is directed to a receipt server which provides the consumer with the receipt for the purchase in a way that allows a refund. The receipt server then directs the consumer to the actual location of the pay-for-view information. After viewing the information, if the consumer wants a refund, the consumer uses the receipt to link to a refund serve, which has the consumer provide a reason for granting the refund. Then the refund server conveys this explanation to the information vendor, who, by communication through the refund server, grants or denies the refund.

[0008] The architecture of the present invention also provides for a prelude to the above scenario. In the prelude, a consumer observes an advertisement for an information vendor's pay-per-view information posted on the network by an advertiser different from the information vendor. The referral server redirects the consumer from the advertiser to the information vendor, providing this redirection in a way that allows the other elements of the architecture both to compensate the advertiser for the referral and to reclaim the compensation from the advertiser if the consumer is granted a refund.

[0009] In the case of an implementation on the Internet, the independent automated transaction processing elements of the distributed architecture can be generic http servers with cgi capability.

[0010] The above and other features and advantages of the invention will become apparent from a consideration of the subsequent detailed description presented in connection with FIG. 1, which shows the distributed architecture of the present invention in terms of the distinct elements it comprises, and which also indicates the different interactions that occur between the different elements and a consumer, an information vendor, and an advertiser.

[0011] The information purchasing architecture of the present invention, in the preferred embodiment, will now be described by way of a scenario, i.e. a particular sequence of actions illustrating the operation of the invention in the preferred embodiment. In this scenario, as illustrated in FIG. 1, an advertiser 24 leads a consumer 20 to purchase access to information 23 provided by a vendor 22, and later requests and is granted a refund. The purchase and refund are provided using a system according to the architecture of the present invention 10, in which the various elements of the architecture are all owned or operated by a particular broker. In what follows it is assumed that the consumer, the vendor, and the advertiser, all have accounts with the broker. These accounts hold some form of scrip recognized by all parties as valid in exchange for access to information and also valid in exchange for ordinary money. In the preferred embodiment, the accounts hold scrip in denominations that are as small as one tenth of one hundredth of a US dollar, thereby allowing payments of quite small value, so-called micropayments.

[0012] Referring now to FIG. 1, the consumer 20 visits the advertiser 24 and observes an advertisement for some pay-per-view information 23 provided by the information vendor 22. After examining the advertisement, the consumer elects to find out more about the pay-per-view information and to possibly purchase access. The consumer makes this election by exercising a link provided by the advertiser. The link connects the consumer to the referral server 14, an agent of a broker and an element of the architecture 10 of the present invention.

[0013] On the Internet, a link at a first website is a W₃address of another website embedded in a document at the first website. The link may include various cgi parameters, as described above, to pass information between servers on the network.

[0014] All of the interaction between the consumer 20 and the advertiser 24 is indicated by the interaction designated I₋₂, the subscript made negative to indicate that this interaction is part of the prelude leading to the main scenario. After the consumer 20 is redirected to the referral server 14, in interaction I₋₁, the referral server encodes as a special environment variable information about the advertiser, and then redirects the consumer to the information vendor 22.

[0015] Now the main part of the scenario begins. While linked to the information vendor 22, in interaction I₁the consumer 20 receives from the vendor, in a single download, a description of the pay-per-view information offered by the vendor, and also a link that can be exercised to request purchasing information, including the price. The consumer examines the description included in I₁, and decides to retrieve the purchasing information by exercising the link to the purchasing information included in I₁. The link redirects the consumer to a price tag server 11 resulting in interaction I₂between the consumer and the price tag server.

[0016] Interaction I₂represents the consumer 20 linking to the price tag server 11 and retrieving from the server, in a single download, purchasing information about the pay-per-view information being considered by the consumer, including the cost of access and information about the vendor 22, and a link that can be exercised to purchase access to the described information. The consumer decides to purchase access to the information and exercises the purchase link; exercising the purchase link results in interaction I₃between the consumer 20 and the receipt server 12a. The price tag server 11 dynamically selected the receipt server 12afrom among several possible receipt servers 12a, 12b, 12cbased on information the price tag server had recorded on how it had recently distributed load among the different receipt servers. The decision by the price tag server of which receipt server to use was encoded in the link provided to the consumer in interaction I₂.

[0017] In interaction I₃, the receipt server 12aissues the consumer 20 a receipt for the purchase of the pay-per-view information. The receipt includes a link to the actual location of the pay-per-view information 23, which the consumer accesses in interaction I₄, and also a link that the consumer can exercise to request a refund. The receipt also includes a portion that can be saved by the consumer as a record of the purchase, useful, for example, in recording expenses for tax purposes or for billing others for the service of accessing the information.

[0018] The access of interaction I₄is intended to be temporary, and exclusively for the consumer 20 who has paid for the access, not others. The architecture of the present invention provides for this exclusive and time-limited access by employing a special access protocol enabled by the architecture of the present invention. According to this protocol, the price tag server 11 acts as an access authorization server for the document-server hosting the information 23 of the information vendor 22. The two machines agree in advance on a secret encryption key consisting of some number of random bytes.

[0019] The function of the authorization server is to direct qualified clients to the document server to retrieve files. With each request, the authorization server issues the client an access token that is a string of digits. This token is used by the client for gaining access to a document for a limited time.

[0020] In the preferred embodiment, the token includes the following fields:

[0021] file—the name of some specific file, service, or port on the document server;

[0022] time=seconds elapsed since Jan. 1, 1970 GMT, as computed by the authorization server;

[0023] span=some number of seconds, which will be used to determine how long access is granted; and

[0024] key=shared secret string of random bytes.

[0025] Then the token is constructed according to:

[0026] token=file|time|span|hash(file|time|span|key)

[0027] where | indicates concatenation of variables, and hash is any modern cryptographic hash function, such as SHA or MD5.

[0028] When the consumer presents a token to the document server, the document server first checks the token to make sure it has not expired. For example, defining t₂as the number of seconds elapsed since Jan. 1, 1970 GMT as computed by the document server at the moment of the document request, access is denied if the time of access differs from t₂by an amount more than span.

[0029] Next, the document server checks the token to make sure it is not counterfeit. Since file, time, and span are sent in the unencrypted, and key is known in advance, it is easy to compute the hash function and so check the authenticity of the token. If the token is not valid, then access is denied. If the token passes both tests, the document server transmits the document to the consumer using a network protocol. The consumer then has full access to the document until the token expires.

[0030] The receipt issued to the consumer 20 by the receipt server 12aincludes a segment that provides a means by which the consumer can request a refund. After examining the pay-per-view information, the consumer decides to request a refund. To do this, the consumer executes the refund request segment of the receipt. This action links the consumer to the refund server 13.

[0031] In interaction I₅, the refund server 13 has the consumer explain why the consumer wants a refund. In interaction I₆, which proceeds by electronic mail, the refund server 13 provides this refund request, including the explanation, to the information vendor 22. Also in interaction 16, the information vendor grants or denies the refund request. Refund server 13 keeps track of both how often the particular consumer 20 has requested a refund, and how often the information vendor 22 has granted refunds.

[0032] The refund server 13 adjusts the accounts of both the information vendor 22 and the advertiser 24 to reflect that the information vendor has granted a refund. The refund server is able to adjust not only the information vendor account but also the advertiser account because the environment variable created by the referral server 14 has been made to track the sequence of interactions, being carried along by the price tag server 11 and receipt server 12a.

[0033] In another scenario, a consumer may not have an account with the same broker as the information vendor and advertiser. In that case, the consumer broker and information vendor broker cooperate to assure payment to the information vendor from the account of the consumer and to refund to the account of the consumer the purchase price if the consumer is granted a refund. Similar cooperation among different brokers occurs when the advertiser uses another broker.

[0034] The architecture of the present invention offers several advantages. First, there is a third party (the price tag server) summary of the details of a purchase provided to a consumer before the purchase is actually made. This reduces the risk of an unscrupulous information vendor preying on naive consumers. Second, a consumer can remain anonymous in dealing with an information vendor both in purchasing pay-per-view information and in requesting a refund.

[0035] Finally, this architecture allows for a non-arbitrary mechanism for deciding whether to grant a consumer a refund, and, advantageously, arranges for the information merchant to make the refund decision; certainly the broker is less likely to be equipped to make a knowledgeable decision about whether a refund is reasonable. In addition, the architecture allows providing some oversight of unscrupulous behavior by either consumers or information vendors. The refund server can monitor the pattern of refund-granting by an information vendor, and also can monitor the pattern of refund-requesting by a consumer.

[0036] It is to be understood that the above-described arrangements are only illustrative of the application of the principles of the present invention. Numerous modifications and alternative arrangements may be devised by those skilled in the art without departing from the spirit and scope of the present invention and appended claims are intended to cover such modifications and arrangements.