WO2002009430A2

WO2002009430A2 - System and method for facilitating subscriber access to web enabled services

Info

Publication number: WO2002009430A2
Application number: PCT/US2001/022656
Authority: WO
Inventors: Reem Safadi
Original assignee: General Instrument Corporation
Priority date: 2000-07-21
Filing date: 2001-07-19
Publication date: 2002-01-31
Also published as: CN1459197A; CA2415866A1; KR20030031959A; AU2001277911A1; WO2002009430A3; EP1302075A2

Abstract

A system and method for facilitating subscriber access to an Internet site providing content, such transcripts, associated with an audiovisual program uses a virtual channel table (VCT) containing URLs. Access to the URLs by the subscriber is controlled through an allocation of a tier, and associating the allocated tier with this adjunct service (i.e., the capability of accessing the web site pointed to by the URL). The system provides a great convenience to subscribers, eliminating the need to physically use other Internet access devices to access the web site affiliated with the audiovisual program, and provides a straightforward mechanism for system operators for allowing access without the complexity of a parallel authorization and access infrastructure (e.g., policy and proxy servers).

Description

TITLE OF THE INVENTION

SYSTEM AND METHOD FOR FACILITATING SUBSCRIBER ACCESS TO

WEB ENABLED SERVICES

FIELD OF THE INVENTION

The present invention relates generally to a system and method for facilitating a subscriber's access to an Internet site, and, more particularly, for facilitating subscriber access using a virtual channel table (VCT) containing a hyperlink (i.e., a Uniform Resource Locator — URL) to the destination site.

BACKGROUND OF THE INVENTION

Communication in modern society has been greatly enhanced by the advent of such widespread data networks as public telephone systems, the Internet (including the World Wide Web) and cable and satellite television systems. In particular, programmers/providers of audiovisual programs typically disseminated over cable television systems have been making corresponding content (e.g., transcripts, video clips, etc.) available on an affiliated Internet web site. In conventional systems, a viewer who has missed an audiovisual program, for example on CNN, or desires supplemental information about an audiovisual program actually viewed, is required to use a personal computer (PC) or the like to access the corresponding web site, for example http://www.cnn.com, to retrieve the sought-after content. The foregoing access requires that the viewer physically walk over to the PC, which is generally undesirable.

Alternatively, it is known to provide an interactive, digital set-top terminal with Internet access capability. However, in such known systems, a large amount of headend parallel infrastructure is required to allow a viewer to be authorized and access the desired web site (e.g., policy server, proxy servers, etc.). Moreover, such systems do not provide a straightforward way to allow a multi-system operator (MSO) to charge for accessing these sites as a service, since it is a value added proposition, eliminating a major inconvenience for the viewer.

U.S. Patent No. 6,018,764 to Field et al. entitled "MAPPING UNIFORM RESOURCE LOCATORS TO BROADCAST ADDRESSES IN A TELEVISION SIGNAL" discloses a system where a user can retrieve web pages from a one-way broadcast television signal. It further discloses a system that allows a user to select from a range of information, including hypertext markup language (HTML) pages, which is carried in the broadcast stream by invoking a command which is defined according to a uniform resource locator (URL) format. Table mapping data is carried in the broadcast signal and provides a broadcast address corresponding to the URL of the user request signal to identify a location in the broadcast signal from which the desired information can be retrieved. Field et al., however, do not appear to disclose any mechanism for controlling authorization and access to the Internet information, nor a means of facilitating access to a large number of sites. Accordingly, consumer convenience and revenue opportunities are lost.

There is therefore a need to provide an improved method and system for providing Internet access to a subscriber that minimizes or eliminates one or more of the shortcomings set forth above.

SUMMARY OF THE INVENTION

One advantage of the present invention is that it provides a straightforward mechanism for allowing access to web sites related to an audiovisual service without the complexity of a parallel authorization and access infrastructure. Another advantage of a system and method according to the invention is that it provides a great convenience to subscribers, eliminating the need for the subscriber to physically walk over to a personal computer (PC) or the like to access a website affiliated with an audiovisual program. The present invention provides a system and method that establishes the capability of accessing an Internet site at a predefined URL as a separate, adjunct service, and assigning an access control reference associated (i.e., "tier") to it for billing/access control.

A method according to the invention facilitates subscriber access to an Internet site associated with an audiovisual service. For example, a subscriber can retrieve a transcript of a missed program, or a video clip therefrom. An initial step involves establishing an adjunct service defined by the subscriber's capability of accessing the related site located at said URL. Next, allocating an access control reference (i.e., a "tier" in a preferred embodiment) associated with the adjunct service configured to facilitate evaluation of the subscriber's authorization rights to the adjunct service.

Next, defining a virtual channel table (VCT) that includes the URL of the site. Finally, broadcasting the VCT to a terminal configured to use the URL to selectively provide access to the site. A corresponding system is also presented, as well as a terminal used by the subscriber.

Other objects, features, and advantages of the present invention will become apparent to one skilled in the art from the following detailed description and accompanying drawings illustrating features of this invention by way of example, but not by way of limitation.

BRIEF DESCRIPTION OF THE DRAWINGS

Figure 1 is a block diagram view of a system for facilitating access according to the invention; Figure 2 is a virtual channel table (VCT) including a URL according to the invention; and

Figure 3 is a block diagram view showing, in greater detail, a terminal located at a subscriber's premises according to the invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

Referring now to the drawings wherein like reference numerals are used to identify identical components in the various views, Figure 1 is block diagram of a system 10 in accordance with the present invention. System 10 is configured for allowing or facilitating a subscriber 12 to access, by way of a terminal 14, an Internet web site delivered by web server 16. The web site is associated in some fashion to an audiovisual program received by the subscriber originating from audiovisual programming source 18. Figure 1 further illustrates a communications network, such as the Internet 20, a business computing system 22, an access controller 24, a customer response center (CRC) 26, and headend equipment 28. Before proceeding to a detailed description, a general overview of the capabilities provided by the invention will be set forth. As described in the Background, a problem exists with conventional systems when a subscriber 12 wishes to access a web site 16 for the purpose of retrieving content that is related or somehow associated with an audiovisual program. For example, such is the case when the subscriber 12 misses the program, and wishes to retrieve a transcript of the program. Other scenarios are possible, for example, when the web site contains additional or supplemental information, perhaps concerning the subject matter of the audiovisual program. In any event, the subscriber 12 conventionally either (i) physically walks over to a personal computer (PC — not shown) or the like for com ection to the Internet 20 for accessing the web site 16, or (ii) uses an interactive digital consumer terminal having internet capabilities to access the Internet. In the former case, a great inconvenience is placed on the subscriber 12. In the latter case, in conventional arrangements, the cable or satellite television provider has undertaken to provide a completely parallel system for authorization and access to the Internet (i.e., parallel to the principal audiovisual and/or audio programming authorization access/delivery system). The present invention overcomes the drawbacks of each of these scenarios. Specifically, a system and method according to the invention establishes an adjunct service associated with the audiovisual service. As used herein, an "adjunct service" is a service that provides the capability of accessing the related web site pointed to by a specified URL. A tier is allocated, and is associated with the adjunct service. The URL of the related web site is added to a Virtual Channel Table (VCT) and provided to the set-top terminal, which selectively allows access to the website in the same manner as though it were an audiovisual service (e.g., via entitlement management messages—EMMs, and the like). Control of access (i.e., conditional access), billing, and other business operations may then be conducted in an identical manner as presently done with audiovisual services. The subscriber now need not physically get up and walk over to his or her PC — access may be obtained through the customer premises terminal 14. Moreover, a parallel infrastructure is not required (e.g., policy servers, proxy servers, and the like conventionally deployed).

Referring again to Figure 1, terminal 14 may comprise any one of set-top terminal, a consumer terminal, a cable television entertainment terminal, a digital television, or a host with point of deployment capability including a suitably configured personal computer (PC). In a preferred embodiment, terminal 14 comprises a digital, set-top terminal 14, having a capability of receiving and processing both analog audiovisual signals, as well as digital audiovisual signals (e.g., MPEG-2 digital transport stream). In general, the set-top terminal 14 is configured to process the messages that it receives (e.g., virtual channel tables, access requirements, authorization rights) pertaining to the URL-based, adjunct service according to the invention.

Server 16 is configured to provide content, such as text (e.g., transcripts) and moving pictures (e.g., video clips), and applications that are associated with an audiovisual service, or with a programmer/provider of the audiovisual service. For example, where an audiovisual service is CNN® , a Uniform Resource Locator (URL) of server 16 may be http://www.cnn.com or http://cnnfn.com. The resources pointed to by these URLs are included in a Virtual Channel Table (VCT). In an alternate embodiment it may be present in a descriptor present within the Program Map Table of the MPEG-2 audiovisual service. Generally, the information provided by server 16 may be in a Hyper Text Markup Language (HTML) format, although other file format may be provided, especially if the content is streamed media using any of the corresponding applications (for example Real, Microsoft, and Apple). The information served up by server 16 is provided preferably as digital data to headend equipment 28. As understood by those of ordinary skill in the art, server 16 may be accessed via Internet 20 using apparatus suitably configured as a Hyper Text Transfer Protocol (HTTP) user-agent, such as a web browser. Accordingly, server 16 is preferably

HTTP (e.g., version 1.1) compliant, and may comprise conventional hardware and web server software.

Programming services 18 is a source of video, audio, and audiovisual programming services from network television stations and the like. The programming services, such as an audiovisual service (e.g., CNN), may be provided as digital data to headend equipment 28.

One advantage of the invention is that it allows access control to Internet resources in a very efficient manner, without the need for additional proxy/policy servers, provisioning, administration etc. at a headend that is common to conventional systems. To fully appreciate the elegance of the invention, a detailed description of access control information will be set forth. Access control to a service comprises two main parts. The first part defines the access requirements for the particular service and the second part defines the authorization rights for a particular set-top terminal to access these services. The access requirements may be considered as the lock, and the authorization rights may be considered as the key. When the authorization rights match the access requirements, the set-top terminal is allowed to access the service (and associated objects).

Both satellite and cable television access control systems utilize the concept of "tiering". For audiovisual services, a tier is a logical grouping of programs or services (the degenerate case being a single program or service). The tier is created to facilitate control of the user's (subscriber's) access to the service or group of services in the tier, based upon the MSO's subscriber profile (i.e., which services are subscribed to by a given consumer). The access rights of the user would demand a great deal of memory in the set-top terminal if the access rights were stored as separate flags for each and every program or object available. In one embodiment, the tiers are represented as single binary digits (bits) that can be defined and redefined dynamically. Since each tier (or group) is represented as a single bit and the tiers are defined to be relevant to the service offering at a given point in time, they offer the most compact representation possible for the subscriber's access rights (i.e., compactness is very important, since the access rights are preferably kept in secure memory, which is limited, and is preferably transmitted frequently, and as such bandwidth requirements are minimized). Additionally, while such authorization rights may be stored on a server at the other end of the network (as opposed to the set-top terminal 14), where a set-top terminal 14 may query its rights by communicating with such server in real time, it is preferred that this access information be stored within set-top terminal 14 for security, robustness, performance, as well as minimizing single point of failure effects. Once the event (or "program") terminates, a tier definition may be updated to reflect this change.

Moreover, there are at least two types of tiers. The first type is a subscription tier which is associated with a service (and corresponding objects) that continues over a duration of time, and which is purchased ahead of actual use. The second type, an Impulse Pay Per Use (IPPU, analogous to the Impulse Pay Per View for video programming), allows for an impulse purchase of an object or a set of objects associated with a given service/application and may have a time duration associated with it. It will be appreciated by those of ordinary skill in the art that other usages, combination or conditional, can be based on these two tiers.

With continued reference to Figure 1, business computing system 22, in the illustrated embodiment, comprises an MSO's business computing system that runs the MSO's operation, and includes such functions as billing, system configuration and business operations. The computing system 22 may comprise conventional systems known to those of ordinary skill in the art. In the illustrated embodiment, computing system 22 is used to establish the adjunct service. In this regard, system 22 is configured to allocate an access control reference associate (i.e., a tier) and associate the tier with the adjunct service. The tier may be of the subscription type, or may be of the IPPU type to be described in connection with CRC 26 below.

Access controller 24 is configured to generate a virtual channel table (VCT) 29 according to the invention (best shown in Fig. 2). Controller 24 is further configured to assign access rights to a given service and the authorization to access such a service to each subscriber. Controller 24 is further configured to interface with MSO business computing system 22. Via this interface, controller 24 is informed, for example through communication of the details of the tier allocated for the adjunct service, how to set-up the access rights for each service as well as the authorization rights for the different subscribers. Controller 24 can then generate messages which are broadcast to set-top terminal 14 that define the access requirements for services, including the adjunct service as well as defining the authorization rights of the subscriber 12 to services, including the adjunct service. The authorization tiers for which the subscriber 12 has been authorized (i.e., what the authorization rights of the subscriber are) are preferably encrypted and conveyed by access controller 24 in a corresponding Entitlement Management Message (EMM) to set-top terminal 14, for processing by a secure processor.

Customer Response Center (CRC) 26, in the illustrated embodiment, is configured to allow a subscriber to initiate an Impulse Pay Per Use (IPPU) activation of the Internet access according to the invention. CRC 26 may be accessed by the subscriber 12 through a communications network (e.g., Internet 20) or the like.

Communication and service selection can occur, for example, between a web browser at the subscriber's location (e.g., in the subscriber's terminal 14) and a web server (not shown) associated with the CRC 26. The selection is thereafter forwarded to business computing system 22 (e.g., the billing system portion). As part of the communication with access controller 24, the billing system is configured to actuate or otherwise command the access controller to add the service identified in the subscriber's IPPU selection. It should be understood that activation of a service is a different, separate process from that originated by system 22 which tells access controller 24 which subscriber's are entitled to access the service. There may be a direct link between HE equipment 28 and CRC 26, as shown by the dashed-line connection in Figure 1. Cable television (CATV) system headend equipment 28 is configured to perform a variety of conventional functions. One function may include a multiplexing function that generates a broadcast signal, having video, audio, and audiovisual services originating from both programming source 18 and digital data originating from web server 16. The resulting signals may be carried as a packetized digital transport stream conforming to, for example, the Moving Pictures Experts Group-2 (MPEG-2) standard. Headend equipment 28 may be further configured to process various transport streams referred to above, as well as analog feeds, for distribution to cable system customers. For example, various encryption/decryption and scrambling/descrambling operations may take place.

The primary audiovisual service (e.g., CNN) may be provided downstream in either analog or digital form. The adjunct service, specifically the information from server 16 is provided downstream in digital form, and in one embodiment via the interactive segment of the network (using a phone modem or RF cable modem). To handle the upstream transmission path, for example, to handle HTTP requests originating at terminal 14 destined for server 16, headend equipment 28 includes further components. In one embodiment, upstream communication occurs via a cable modem integrated into set-top terminal 14, which may comply with the DOCSIS standard. Accordingly, headend equipment 28 may further include a Cable Modem Termination System (CMTS — not shown), and a headend router (not shown) for routing traffic to server 16, both of which may comprise conventional components known in the art.

Figure 2 shows a simplified view of Virtual Channel Table (VCT) 29, which includes a plurality of records, exemplars of which are designated 29A, 29_B and 29c- VCT 29 provides a list of services offered on a particular MSO network and indicates the association of these services with a given logical channel. VCT 29 is extended beyond conventional configurations to include a new parameter, which is the URL(s) of the Internet site delivered by web server 16, the content of the adjunct service. Figure 2 shows, in record 29A, information associated with an audiovisual service for CNN (viz. virtual channel 1). Figure 2 also shows, in record 29B, an adjunct service defined by a capability of accessing the resource specified by URL http://www.cnn.com. More than one URL may be defined for the adjunct service, as shown by record 29c, for example http://cnnfn.com. As known, the VCT specifies where the service may be found in the broadcast signal, for example, the specification of the carrier frequency (i.e., the physical, RF channel—the carrier definition table (CDT) reference), and, for a digital transport stream, a program identification within the transport stream. A wide variety of other infprmation may also be included in VCT 29, not shown in Figure 2 for clarity. Figure 3 shows terminal 14, suitable for use in the present invention, in greater detail. Terminal 14 includes a decoder 30 comprising an in-band tuner 32 and a cable modem 34, a first, master processor 36, a second, secure processor 38, a main memory unit 40, a secure memory 42, a memory bus controller 44 for controlling a memory bus 46, an input interface 48 and an output interface 50.

In-band tuner 32 is configured to receive the broadcast signal, tune and decode it as required, under the control of master processor 36, to recover the audio and video information for reproduction of the audiovisual service (i.e., CNN) on a display (not shown) coupled to terminal 14. In this regard, processor 36 may use information specified in VCT 29. Regarding the adjunct service (i.e., www.cnn.com), data being received by terminal 14 may be included as payload in an MPEG-2 transport stream, recovered via, for example, a QAM demodulator (not shown) included in decoder 30, or, may be recovered through cable modem 34. The location of where the adjunct service is being delivered, and the particulars of the delivery may also be specified in VCT 29, as understood in the art. Cable modem 34 is also configured for upstream transmission, for example, to headend 28, which provides terminal 14 the capability to transmit HTTP compliant requests addressed to the URL specified in VCT 29.

In the illustrated embodiment, terminal 14 includes two distinct processors. The first is a master processor 36 which may be, for example, a central processing unit. The master processor 36 is the processor which executes object code to perform the functions of terminal 14. The second processor is secure processor 38 that is used to determine whether the access requirements for a service, such as an audiovisual service or the adjunct service, match the authorization rights of the subscriber. Main memory unit 40 may be any form of non- volatile, long-term electronic data storage device including, for example, an electronic memory device, a magnetic hard drive or an optical or magneto-optical disc drive. Memory unit 40 is configured to contain executable code configured to perform a plurality of functions. For example, main memory 40 may include code/objects 52 configured to perform authorization, and provide supporting and abstraction application programming interfaces (APIs).

Memory 40 may further include code/objects 54 corresponding to an operating system software and networking routines/drivers. Memory 40 may still further include code/object corresponding to application programs, such as an electronic program guide (EPG), a web browser, and the like. The secure processor 38 has a connection to the memory bus 46 and thence to the memory unit 40. In addition, secure processor 38 also includes a com ection to secure memory 42 that is unaccessible by master processor 36. Secure memory 42, in a preferred embodiment, is configured to store authorization tiers defining what services to which the subscriber has access. The memory bus controller 44 may be provided to regulate the access to the memory bus 46 by the two processors 36, 38. In one configuration, the memory bus controller monitors activity on the bus 46 directly, responding to master processor 36 so that when master processor 36 is not using memory bus 46, controller 44 may grant access to memory bus 46 to secure processor 38. In an alternate embodiment, the master processor and secure processor functionality may be combined. Specifically, an alternative approach to the present invention, without employing two separate processors, is to have a secure software or firmware task running on the main processor 36 as a "background" task. Such a secure task could perform all the functions described above for the secure processor 38. If the secure task can be carefully designed to resist being hacked into or cracked, then the use of a background secure task provides an efficient way to obtain many of two distinct processors. Input interface 48 is configured to receive input, such as from subscriber 12. For example, input interface may communicate to master processor 36 the identity, and sequence of button depressions on a front panel of terminal 14, as well as the identification and sequence of preselected keys on a remote handheld control (not shown) that have been depressed.

Output interface 50 is configured to produce output signals suitable for generating a display on an attached television, monitor, or the like.

A description of the operation of the system according to the invention will now be set forth. First, the adjunct service is established. The adjunct service may be a subscription type service wherein access to each particular URL may be a separate service, or the group of all URLs for which access is permitted may be offered together as a service. In the alternative, the adjunct service may be of the IPPU type. In either case, the MSO's Access Controller 24 will allocate a tier, either a subscription tier or an IPPU tier using the business computing system 22. If the adjunct service is a subscription service, the subscriber 12 is required to inform the business system 22 and in turn the decoder is granted the corresponding authorization. When the adjunct service has been created as an IPPU type service, the IPPU tier has already been allocated to this service with pre-authorization rights. The subscriber's selection of this service (without having to make a request via phone or via the CRC 26), is granted access. The secure processor logs this activation for further billing reconciliation. Whenever a subscriber is to be allowed access to a service, the business computing system 22 and in turn the Access Controller communicates authorization rights of individual subscribers 12 to access controller 24, which in turn communicates these rights to the associated terminal. The access requirements, on the other hand, are broadcast to the plurality of terminals in an independent manner (asynchronously).

Access controller 24 creates virtual channel table 29 that includes the URL(s) of the sites of the adjunct service and transmits the VCT 29 to headend equipment 28 for broadcast over the CATV network to the terminals 14 connected to the network. In addition, access controller 24 generates and transmits messages containing the access requirements for the adjunct service as well as authorization rights of the subscribers, for example, using EMMs as known. This is shown collectively as message 58 in Figure 1. Terminal 14 is configured, in one aspect of the invention, to provide a simplified user interface for allowing subscriber 12 to utilize the adjunct service. In one embodiment, terminal 14 is configured to detect, for example, when a preselected key on a remote handheld control has been depressed and display available URLs. In an alternate embodiment, the URL or an indication of its presence may be displayed before the subscriber presses any buttons. This detected event (button press) is provided as an input to user interface application software (e.g., contained in block 56 of main memory 40). Master processor 36 extracts the URL(s) of available sites associated with the audiovisual service from VCT 29, and, is further configured to generate a list of the URLs and display the same on a television comiected to terminal 14. The list of possible sites may be implemented by configuring an API to extract the URLs from the VCT 29. The user interface software executing on processor 36 is further configured to facilitate selection by subscriber 12 of one of the URLs from the displayed list. When subscriber 12 has selected a URL, authorization rights are checked.

In this regard, secure processor 38 makes a comparison of the access requirements for accessing the selected site with the authorization rights of the subscriber 12 (i.e., the authorization tier containing information indicative of the subscriber's authorization rights to the service), and generates a result. The authorization rights may be stored in secure memory 42. When the comparison result indicates that the subscriber is authorized to access the site (i.e., the authorization rights match the access requirements), then terminal 14 responds by establishing a connection between the terminal 14 and the specified URL, e.g., transmits an HTTP-compliant request 60 (best shown in Figure 1), for example, by way of cable modem 34 (Figure 3) to headend equipment 28. The cable modem termination system (CMTS), in cooperation with a headend router, forwards the request 60 to Internet 20. Internet 20, according to known routing protocols (TCP/IP) delivers the request to the specified URL at server 16. If server 16 is able to satisfy the request, it does so in response message 62, which is returned through Internet 20, by way of headend equipment 28 to set top terminal 14. The user interface application referred to above may further include a simplified browser functionality capable of interpreting the response message 62. Through the foregoing, the subscriber can select the desired web site to get additional information or see missed programming content without having to type in the URL, or utilize an alternate device, simply by observing the displayed list, and making a selection.

In a further alternate embodiment, the steps of producing a list of links, and checking authorization are collapsed wherein the list returned from the API includes only those URLs for which access by the subscriber 12 has been authorized.

In a still further alternate embodiment, if the subscriber selects a URL but is not authorized, then the authorization status may be changed instantly based on the user's selection via the IPPU option. That is because the adjunct service was, in this embodiment, tagged with an IPPU tier that allows instant authorization. The subscriber has to select this explicitly since there may be implied charges.

The foregoing is exemplary and not limiting in nature, modifications and variations are possible without departing from the spirit and scope of the invention, which are limited only by the appended claims. For example, when the URL-based adjunct service is created as an IPPU tier, the terminal 14 may be configured to connect to the selected site pointed to by the selected URL irrespective of whether the subscriber 12 possess authorization rights, provided, however, that sufficient credit is present in the secure processor. This allows the subscriber to gain access without additional involvement from the MSO. Terminal 14, in this regard, may be configured to subsequently report this transaction to access controller 24, in a manner lcnown to those of ordinary skill in the art for audiovisual programming, for example. Additionally, terminal 14 may be configured to record the access to the URL in a log, which may be subsequently reported to, or retrieved by, access controller 24 for pattern analysis (e.g., for subsequent advertising).

Claims

CLAIMS What is claimed is:

1. A method for allowing a subscriber access to an Internet site associated with an audiovisual service, said method comprising the steps of: establishing an adjunct service defined by said subscriber's access to the site located at said URL; allocating an access control reference associated with the adjunct service configured to facilitate evaluation of the subscriber's authorization rights to the adjunct service; defining a virtual channel table (VCT) that includes a Uniform Resource Locator (URL) of the site; and broadcasting the VCT to a terminal configured to use the URL to provide the subscriber access to the site.

2. The method of claim 1 wherein said terminal is one selected from the group comprising a set-top terminal, a cable television entertainment terminal, a digital television, a personal computer and a host with point of deployment capability.

3. The method of claim 1 wherein said access control reference associate comprises a tier.

4. The method of claim 1 further comprising the step of: comparing access requirements for accessing the site with said authorization tier comprising information indicative of the subscriber's authorization rights to the service and generating a result; and providing access via the terminal to the site when the comparison result indicates that the subscriber is authorized.

5. The method of claim 4 further including the step of : billing said subscriber a fee for the service; and modifying said information indicative of the subscriber's authorization rights so as to allow said access.

6. The method of claim 4 wherein said VCT includes a plurality of URLs corresponding to Internet sites associated with a plurality related audiovisual services, and wherein said establishing step includes the subscriber's access to any one or more of said sites using the corresponding URL.

7. The method of claim 6 wherein said URL is associated with a provider/programmer of the audiovisual service.

8. The method of claim 6 wherein said URL is associated with subject matter of the audiovisual service.

9. A system for facilitating a subscriber's access to an Internet site associated with an audiovisual service comprising: a computing system for allocating a tier and associating with said tier an adjunct service, said adjunct service being defined as including said Internet site at said URL, said Internet site being affiliated with said audiovisual service or a programmer/provider of said audiovisual service in a predetermined fashion, an access controller configured to generate a virtual channel table (VCT) that includes a Uniform Resource Locator (URL) of the site based on said allocated tier, said access controller being further configured to generate messages including access requirements for said adjunct service and authorization rights of said subscriber; and means for broadcasting said VCT and said messages to a terminal which is configured to use the URL to selectively provide the subscriber access to the site.

10. The system of claim 9 wherein said terminal includes a first processor configured to extract the URL from the VCT, and a second, secure processor configured to determine whether, using said messages, said subscriber's authorization rights match the access requirements for access to said site via said terminal, and to establish a connection between said terminal and said site when authorization rights match access requirements.

11. The system of claim 10 wherein said first processor and said second processor respectively comprise distinct processing elements.

12. The system of claim 10 wherein said first processor and said second secure processor are both implemented on a processing element in accordance with respective programming strategies.

13. The system of claim 10 wherein said first processor being further configured to generate a list of URLs for which access by said subscriber is authorized when an input device coupled to said processor indicates that a predetermined key on a remote handheld control has been depressed, said terminal being further configured to generate a display of said list on a display coupled to said terminal.

14. The system of claim 13 wherein said terminal is further configured to facilitate selection by said subscriber of at least one URL from said list, said first processor being further configured to transmit a request to a site corresponding to said selected URL.

15. The system of claim 10 wherein a condition of access to said adjunct service is a payment of a fee, said computing system being further configured to bill said subscriber said fee.

16. A terminal for facilitating a subscriber's access to an Internet site associated with an audiovisual service comprising: a first processor configured to extract a Uniform Resource Locator (URL) of said site associated with said audiovisual service from a virtual channel table (VCT) received from an access controller; a secure processor configured to receive messages including access requirements and authorization rights of said subscriber for an adjunct service, said adjunct service being defined as including a capability of accessing said Internet site at said URL, said Internet site being associated with said audiovisual service in a predetermined fashion; and means for selectively establishing a connection between said terminal and said site when authorization rights match access requirements.

17. The terminal of claim 16 wherein said establishing means includes a cable modem.

18. The terminal of claim 16 wherein said VCT includes a plurality of URLs, said first processor being further configured to generate a list of URLs when an input device coupled to said processor indicates that a preselected key on a remote handheld control has been depressed, said terminal being further configured to generate a display of said list on a display coupled to said terminal.

19. The terminal of claim 18 wherein said terminal is further configured to facilitate selection by said subscriber of one of said URLs from said displayed list.

20. The terminal of claim 19 wherein said first processor, when said subscriber possesses an authorization tier enabling an impulse access, is configured to actuate said establishing means to connect to said selected site at said selected URL, irrespective of whether said subscriber possesses authorization rights for access to said selected site.

21. The terminal of claim 20 wherein said terminal is further configured to report said impulse access to an access controller.

22. The terminal of claim 18 wherein said terminal is further configured to record said access to said site at said URL for reporting.