Method and apparatus for scalable data broadcasting

• US 10,089,655 B2
• Filed: 11/27/2013
• Issued: 10/02/2018
• Est. Priority Date: 11/27/2013
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Mahadevan, Priya, Meike, Roger C., Scott, Glenn C.
• Primary Examiner(s): Stoltenberg, David J
• Assistant Examiner(s): Ezewoko, Michael I
• Application Number:
  US14/092,680
• Publication Number:
  US 20150149297A1
• Time in Patent Office: 1,770 Days
• Field of Search: 705 1467
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 30/0269 based on user profile or attribute
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 65/00 Network arrangements, protocols or services for supporting real-time applications in data packet communication real-time or near real-time messaging, e.g. instant messaging [IM] H04L51/04; selective video distribution H04N21/00
• CPC Class Codes: H04L 65/60 Network streaming of media packets
• CPC Class Codes: H04N 21/23476 by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/2393 involving handling client requests scheduling or organising the servicing of application requests H04L67/60
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/2668 Creating a channel for a dedicated end-user group, e.g. insertion of targeted commercials based on end-user profiles information retrieval from the Internet by querying with filtering and personalisation G06F16/9535; arrangements for replacing or switching information during the broadcast H04H20/10; push services over packet-switching network H04L12/1859; adaptation of message content in packet-switching networks H04L51/063
• CPC Class Codes: H04N 21/4622 Retrieving content or additional data from different sources, e.g. from a broadcast channel and the Internet web site content organization and management for information retrieval from the Internet G06F16/958; transmission by internet of broadcast information H04H60/82; stock exchange data over packet-switching network H04L12/1804; push services including data channel over packet-switching network H04L12/1859
• CPC Class Codes: H04N 21/8358 involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04W 4/21 for social networking applications

Abstract

A data-publishing system facilitates broadcasting a data stream so that each client device obtains a personalized data stream. During operation, a publisher can generate an encoded data stream that does not include a reproducible version of the data stream'"'"'s contents, and generates an encoding sauce to provide to at least one data-brokering system. When a broker receives a request from a client device for access to the data stream, the broker validates the client device'"'"'s access to the data stream, and uses the encoding sauce to generate a secret sauce for the client device. The client device can process the encoded data stream using instructions in the secret sauce to produce a personalized data stream that includes a reproducible version of the data stream'"'"'s contents.

Claims

1. A computer-implemented method comprising:

at a publisher device;

extracting segments from a data stream, to produce an encoded stream;

generating decode instructions that indicate where to re-insert the extracted segments into the encoded stream, and watermark instructions that indicate how to generate watermarks and where to insert the watermarks into the data stream or the encoded stream to produce a personalized data stream;

sending to a broker device the extracted segments, the decode instructions, and the watermark instructions; and

upon receiving a request for the data stream from a client device, providing to the client device the encoded stream and directing the client device to the broker device; and

at the broker device;

receiving from the client device a request for information corresponding to the data stream, the request including a client identifier;

encoding some of the extracted segments with the client identifier based on the watermark instructions, to produce the watermarks; and

sending to the client device the information including the extracted segments, the decode instructions, the watermarks, and the watermark instructions, to enable the client device to recover the data stream using the decode instructions and insert the watermarks into the data stream or the encoded stream using the watermark instructions to produce the personalized stream.

2. The computer-implemented method of claim 1, wherein, at the publisher device:

the extracting includes extracting spaced segments from the data stream; and

the generating includes generating the decode instructions to map each extracted segment to an offset in the encoded stream.

3. The computer-implemented method of claim 1, wherein, at the broker device:

the encoding some of the extracted segments includes XORing the extracted segments each with the client identifier, to produce the watermarks.

4. The computer-implemented method of claim 3, further comprising, at the broker device:

authorizing the client device based on the client identifier before performing the encoding and the sending to the client device.

5. The computer-implemented method of claim 1, further comprising, at the client device:

upon receiving the information including the extracted segments, the decode instructions, the watermarks, and the watermark instructions;

inserting the extracted segments into the encoded stream based on the decode instructions to recover the data stream; and

inserting the watermarks into the data stream or the encoded stream based on the watermark instructions, to produce the personalized stream.

6. The computer-implemented method of claim 1, further comprising, at the client device:

upon receiving the information including the extracted segments, the decode instructions, the watermarks, and the watermark instructions, inserting the watermarks into the data stream or the encoded stream based on the watermark instructions, to produce the personalized stream.

7. The computer-implemented method of claim 6, further comprising, at the publisher device:

receiving a request to identify the client device; and

processing the personalized data stream based on the watermarking instructions to detect the client identifier from the watermarks in the personalized data stream.

8. The computer-implemented method of claim 1, wherein:

the publisher device and the client device are configured to communicate with each other over an information centric network (ICN) using Interests to request data by name and content objects that carry and name the data that satisfy the Interests; and

at the publisher device;

the receiving the request for the data stream from the client device includes receiving, from the client device over the ICN, an Interest naming the data stream; and

the providing includes providing, to the client device over the ICN, a content object naming the data stream and indicating a source for the data stream.

9. The computer-implemented method of claim 8, wherein:

the broker device and the client device are configured to communicate with each other over the ICN using Interests to request data by name and content objects that carry and name the data that satisfy the Interests; and

at the broker device;

the receiving the request for the information corresponding to the data stream from the client device includes receiving, from the client device over the ICN, an Interest naming the data stream; and

the sending includes sending, to the client device over the ICN, content objects carrying the information.

10. The computer-implemented method of claim 1, wherein the data stream includes one or more of an audio stream and a video stream.

11. A system comprising:

a publisher device configured to perform;

extracting segments from a data stream, to produce an encoded stream;

generating decode instructions that indicate where to re-insert the extracted segments into the encoded stream, and watermark instructions that indicate how to generate watermarks and where to insert the watermarks into the data stream or the encoded stream to produce a personalized data stream;

sending to a broker device the extracted segments, the decode instructions, and the watermark instructions; and

upon receiving a request for the data stream from a client device, providing to the client device the encoded stream and directing the client device to the broker device; and

the broker device configure to perform;

receiving from the client device a request for information corresponding to the data stream, the request including a client identifier;

encoding some of the extracted segments with the client identifier based on the watermark instructions, to produce the watermarks; and

sending to the client device the information including the extracted segments, the decode instructions, the watermarks, and the watermark instructions, to enable the client device to recover the data stream using the decode instructions and insert the watermarks into the data stream or the encoded stream using the watermark instructions to produce the personalized stream.

12. The system of claim 11, wherein the publisher device is configured to perform:

the extracting by extracting spaced segments from the data stream; and

the generating by generating the decode instructions to map each extracted segment to an offset in the encoded stream.

13. The system of claim 11, wherein the broker device is configured to perform:

the encoding some of the extracted segments by XORing the extracted segments each with the client identifier, to produce the watermarks.

14. The system of claim 13, wherein the broker device is further configured to perform:

authorizing the client device based on the client identifier before performing the encoding and the sending to the client device.

15. The system of claim 11, wherein the client device is further configured to perform:

upon receiving the information including the extracted segments, the decode instructions, the watermarks, and the watermark instructions;

inserting the extracted segments into the encoded stream based on the decode instructions to recover the data stream; and

inserting the watermarks into the data stream or the encoded stream based on the watermark instructions, to produce the personalized stream.

16. The system of claim 11, wherein the client device is further configured to perform:

upon receiving the information including the extracted segments, the decode instructions, the watermarks, and the watermark instructions, inserting the watermarks into the data stream or the encoded stream based on the watermark instructions, to produce the personalized stream.

17. The system of claim 16, wherein the publisher device is further configured to perform:

receiving a request to identify the client device; and

processing the personalized data stream based on the watermarking instructions to detect the client identifier from the watermarks in the personalized data stream.

18. A computer-implemented method comprising:

at a publisher device;

extracting segments from a data stream, to produce an encoded stream;

generating decode instructions that indicate where to re-insert the extracted segments into the encoded stream, and watermark instructions that indicate how to generate watermarks and where to insert the watermarks into the data stream or the encoded stream to produce a personalized data stream;

sending to a broker device the extracted segments, the decode instructions, and the watermark instructions; and

upon receiving a request for the data stream from a client device, providing to the client device the encoded stream and directing the client device to the broker device; and

at the broker device;

receiving from the client device a request for information corresponding to the data stream, the request including a client identifier;

encoding some of the extracted segments with the client identifier based on the watermark instructions, to produce the watermarks; and

sending to the client device the information including the extracted segments, the decode instructions, and the watermark instructions, to enable the client device to recover the data stream using the decode instructions, and generate the watermarks and insert the watermarks into the data stream or the encoded stream using the watermark instructions to produce the personalized stream.

19. The system of claim 18, wherein, at the publisher device:

the extracting includes extracting spaced segments from the data stream; and

the generating includes generating the decode instructions to map each extracted segment to an offset in the encoded stream.

20. The system of claim 18, wherein the data stream includes one or more of an audio stream and a video stream.