Electrical computers and digital processing systems: multicomput – Distributed data processing – Client/server
Reexamination Certificate
1999-05-12
2004-07-13
Meky, Moustafa M. (Department: 2157)
Electrical computers and digital processing systems: multicomput
Distributed data processing
Client/server
C709S217000, C709S219000
Reexamination Certificate
active
06763370
ABSTRACT:
FIELD OF THE INVENTION
This invention relates generally to a method and system for distribution of data across networks, and, more specifically to a system for delivering executable software content over broadband access networks in a secure manner that enables on-demand subscription.
BACKGROUND OF THE INVENTION
The on-demand delivery of software applications and multimedia data types such as audio, video, animation, etc. has not been practical until recently primarily due to the rates at which data is transmitted across communication networks. The rate at which data, formatted into a series of bits, is transmitted is referred to as a bit per second (bps). Early modems were capable of transmitting information at a rate of approximately 300 bits per second. Thereafter, the speeds at which modems were capable of transmitting and receiving data increased. With such increases in modem speed, the nature of network topologies as well as the types of data transmitted across networks began to evolve. With modem speeds of 9600 bps and 1200 bps computer networks such as the Internet were primarily an ASCII text environment with specific protocols and text messaging. Subsequent increases in modem speed enabled more complex information to be accessed over the Internet and other computer networks. While ASCII text paradigm still exist on the World Wide Web portion of the Internet today, the more recent increased bandwidth environment has enabled communication of more complex content and multimedia data types.
More recently, high performance broadband technology and cable modems, with connectivity speeds in excess of 1 million bps, are being deployed and offered by cable, telephone, cellular and satellite enterprises worldwide. Current broadband access networks include the cable industry's shared medium Hybrid Fiber Coax (HFC) networks and the telephone industry's digital subscriber lines (xDSL).
With the advent of broadband technology and broadband access networks, complex multimedia data types and software titles, previously only available on Compact Disc Read Only Memory (CD-ROM) and Digital Versatile Disc (DVD), hereafter referred to as “title(s),” are now capable of being remotely accessed by subscribers to broadband access network services.
There are, however, factors other than data rates that also have made on-demand delivery of titles impractical. One such obstacle preventing on-demand delivery of content including software and multimedia titles to date has been the requirement to have the title loaded onto the subscriber's local computer system in order to execute the title. Further, the widespread copying or “pirating” of title content, and the associated security risks associated with distribution of fully enabled copies of titles, has made on-demand distribution unattractive to software publishers and content libraries.
Accordingly, a need exists for a method and system for on-demand delivery of executable software content, which does not require installation of the content on the subscriber's local computer system.
An additional need exists for a method and system to deliver content to subscriber's in an on-demand basis which provides security to protect the value of the content and which prevents unauthorized use and copying thereof.
An additional need exists for a method and system in which content may be delivered across broadband access network in a manner which meets the latency requirements of the content being executed.
SUMMARY OF THE INVENTION
The Secure Content Delivery Platform (SCDP) of the present invention delivers high-bandwidth executable content, on-demand, over broadband, access networks. Using the SCDP platform, broadband subscribers, e.g. subscribers to cable modem and xDSL services, have access to titles across the broadband networks.
Users select a title to run from a virtual storefront, for example on the World Wide Web, which contains a virtual catalog of available titles. Upon selection of the title, the user negotiates for an actual purchase of the title. Negotiation includes user registration with a third party electronic commerce system (eCommerce), provision of user billing information, and selection of one of the purchase types offered with the selected title. Examples of possible purchase types may include 1) a time-limited demo of the title, 2) a single payment for a single use” of a title, 3) a single payment which allows unlimited “uses” of a title over some specified time period e.g., week, month, etc.
Upon completion of the purchase negotiation, SCDP client software running on the user's PC obtains an authorization token and keying material from a Conditional Access Server (CAS). The token authorizes the client process to run the selected title from a network file server accessible across the broadband network. The data retrieved from the file server is encrypted. The SCDP client process uses the keying material provided by the conditional access server to decrypt the data from the file server. With the present invention, titles run on the user's PC, but the title is not downloaded, in its entirety, onto the PC. A title is formatted into an electronic package that contains the title's files in a compressed and encrypted form, referred to hereafter as a briq. The briq is actually a portable, self-contained file system, containing all of the files necessary to run a particular title. Briqs are stored on a network file server, referred to hereafter as a RAFT server, accessible across a broadband network. The SCDP client treats the briq like a local file system on the user's PC. When running a title, the operating system, e.g. Windows, makes read requests to this local file system. The SCDP client, which, in the illustrative embodiment, includes a Windows Virtual Device Driver (VxD), services these requests by retrieving the requested blocks of briq data from the RAFT server. After retrieving the requested block of data, the VxD decompresses and decrypts the briq data, and passes the data onto the operating system on the user's PC.
In accordance with one aspect of the present invention, the software title is never “installed” on the target system. The SCDP client software creates an installation abstraction, maintaining the illusion for the operating system that the title currently executing is installed on the host PC. Thus, when execution of the title is terminated, there is no remaining evidence the title ran on the system. No files associated with the title are left on the PC's hard-drive, and no operating system state information e.g., registry variables associated with the title, remains. Users of titles have the option of saving certain state information that would be desirable to maintain across plays; e.g., the “level” achieved in a game, etc. Such state information may be saved in write-through file described hereinafter.
In accordance with another aspect of the present invention, the SCDP client software uses an inventive proprietary Random Access File Transport (RAFT) protocol to retrieve briq data across broadband network. The protocol provides SCDP clients with read-only access to files and directories stored on RAFT servers. Because the briq is treated like a local file system, the RAFT client does not need to be visible as an operating system drive and does not need to interface with the operating system's file system manager, the Windows Installable File System (IFS) Manager in the illustrative embodiment. As a result, the RAFT client file system driver, a VxD in the illustrative embodiment, is smaller and simpler than a remote or network filelsystem driver. In addition, the RAFT protocol supports dynamic bandwidth restrictions, e.g., “bandwidth throttling”, and access control through the use of RAFT authorization tokens.
In accordance with another aspect of the present invention, the SCDP employs a variety of security mechanisms to protect content from unauthorized access and replay. Authorization tokens and decryption keys are obtained from a conditional access server
Atkins Derek
Eichin Mark W.
Rostcheck David J.
Schmeidler Yonah
Hale and Dorr LLP
Meky Moustafa M.
Softricity, Inc.
LandOfFree
Method and apparatus for content protection in a secure... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Method and apparatus for content protection in a secure..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and apparatus for content protection in a secure... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3199196