Delivering a content item from a server to a device

• US 10,135,611 B1
• Filed: 02/14/2017
• Issued: 11/20/2018
• Est. Priority Date: 09/23/2011
• Status: Active Grant

• Current Assignee: CSC Holdings LLC (Altice USA, Inc.)
• Original Assignee: CSC Holdings LLC (Altice USA, Inc.)
• Inventors: Martell, Lawrence Robert, Henriksen, Brett, Lariccio, Michael, Sweeney, Brian
• Primary Examiner(s): Gracia, Gary S
• Application Number:
  US15/432,163
• Time in Patent Office: 644 Days
• Field of Search: 713168, 713189, 380210, 709203, 709219, 709224, 725 25
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

Methods and systems for delivering a segmented content item from a server to a first and second device are provided. A first key is used to encrypt the segmented content item into a first plurality of encrypted segments and a second key is used to encrypt the segmented content item into a second plurality of encrypted segments. The first and second keys are different. The first plurality of encrypted segments is delivered to the first device, and the second plurality of encrypted segments is delivered to the second device.

Claims

1. A computer-based method for a server to deliver a content item to a first device and a second device, the computer-based method comprising:

storing, in a database of the server, an identifier unique to the first device and an identifier unique to the second device;

receiving, from the first device, a first request for the content item and a first identifier associated with the first device;

requesting a first set of encryption keys in response to a first verification that the first identifier matches the identifier unique to the first device stored in the database;

receiving, from a key management server, the first set of encryption keys in response to the request for the first set of encryption keys;

receiving a plurality of file segments of the content item;

associating, in the database of the server, the first set of encryption keys with the content item and the identifier unique to the first device;

generating a first session-specific playlist including a first plurality of session-specific file segment URLs corresponding to the plurality of file segments, wherein a session-specific file segment URL of the first plurality of session-specific file segment URLs includes a filename of a corresponding file segment of the plurality of file segments appended with a session identification corresponding to a first session;

generating a first encrypted segment by encrypting a file segment of the plurality of file segments using a first encryption key of the first set of encryption keys;

receiving, from the second device, a second request for the content item and a second identifier associated with the second device;

requesting a second set of encryption keys different from the first set of encryption keys in response to a second verification that the second identifier matches the identifier unique to the second device stored in the database;

receiving, from the key management server, the second set of encryption keys in response to the request for the second set of encryption keys;

associating, in the database of the server, the second set of encryption keys with the content item and the identifier unique to the second device;

generating a second session-specific playlist including a second plurality of session-specific file segment URLs corresponding to the plurality of file segments, wherein a session-specific file segment URL of the second plurality of session-specific file segment URLs includes a filename of a corresponding file segment of the plurality of file segments appended with a session identification corresponding to a second session;

generating a second encrypted segment by encrypting the file segment of the plurality of file segments using a second encryption key of the second set of encryption keys; and

delivering the first encrypted segment to the first device and the second encrypted segment to the second device.

2. The computer-based method of claim 1, wherein receiving the first identifier comprises receiving a hardware identifier associated with the first device.

3. The computer-based method of claim 2, wherein receiving the hardware identifier comprises receiving a media access control (MAC) address of the first device.

4. The computer-based method of claim 1, wherein receiving the first identifier comprises receiving an authenticated device credential associated with the first device.

5. The computer-based method of claim 4, wherein receiving the authenticated device credential comprises receiving at least one of a token, a web cookie, or a device certificate.

6. The computer-based method of claim 1, wherein receiving the first identifier comprises receiving identification information associated with a network interface coupled to the first device.

7. The computer-based method of claim 6, wherein receiving the identification information comprises receiving an Internet Protocol (IP) address associated with the network interface.

8. The computer-based method of claim 7, wherein receiving the IP address of the network interface comprises receiving an IP address of one of a cable connection, a cable modem, or a Wi-Fi access point.

9. The computer-based method of claim 1, wherein receiving the first identifier comprises receiving an Internet Protocol (IP) address of the first device.

10. The computer-based method of claim 1, wherein generating the first encrypted segment comprises generating using the first encryption key which is unique to the first set of encryption keys and to the second set of encryption keys.

11. A system to deliver a content item to a first device and a second device, the system comprising:

a database configured to store an identifier unique to the first device and an identifier unique to the second device;

an encryption engine coupled to the database and configured to;

receive, from the first device, a first request for the content item and a first identifier associated with the first device;

request a first set of encryption keys in response to a first verification that the first identifier matches the identifier unique to the first device stored in the database;

receive, from a key management server, the first set of encryption keys in response to the request for the first set of encryption keys;

receive a plurality of file segments of the content item;

associate, in the database, the first set of encryption keys with the content item and the identifier unique to the first device;

generate a first session-specific playlist including a first plurality of session-specific file segment URLs corresponding to the plurality of file segments, wherein a session-specific file segment URL of the first plurality of session-specific file segment URLs includes a filename of a corresponding file segment of the plurality of file segments appended with a session identification corresponding to a first session;

generate a first encrypted segment by encrypting a file segment of the plurality of file segments using a first encryption key of the first set of encryption keys;

receive, from the second device, a second request for the content item and a second identifier associated with the second device;

request a second set of encryption keys different from the first set of encryption keys in response to a second verification that the second identifier matches the identifier unique to the second device stored in the database;

receive, from the key management server, the second set of encryption keys in response to the request for the second set of encryption keys;

associate, in the database, the second set of encryption keys with the content item and the identifier unique to the second device;

generate a second session-specific playlist including a second plurality of session-specific file segment URLs corresponding to the plurality of file segments, wherein a session-specific file segment URL of the second plurality of session-specific file segment URLs includes a filename of a corresponding file segment of the plurality of file segments appended with a session identification corresponding to a second session; and

generate a second encrypted segment by encrypting the file segment of the plurality of file segments using a second encryption key of the second set of encryption keys; and

a communication unit configured to;

deliver the first encrypted segment to the first device and the second encrypted segment to the second device.

12. The system of claim 11, wherein the first identifier comprises a hardware identifier associated with the first device.

13. The system of claim 12, wherein the hardware identifier comprises a media access control (MAC) address of the first device.

14. The system of claim 11, wherein the first identifier comprises an authenticated device credential associated with the first device.

15. The system of claim 14, wherein the authenticated device credential comprises at least one of a token, a web cookie, or a device certificate.

16. The system of claim 11, wherein the first identifier comprises identification information associated with a network interface to which the first device is connected.

17. The system of claim 16, wherein the identification information comprises an Internet Protocol (IP) address associated with the network interface.

18. The system of claim 17, wherein the network interface comprises one of a cable connection, a cable modem, or a Wi-Fi access point.

19. The system of claim 11, wherein the first identifier comprises an Internet Protocol (IP) address of the first device.

20. The system of claim 11, wherein the first encryption key is unique to the first set of encryption keys and to the second set of encryption keys.

21. A non-transitory computer-readable medium having computer-executable instructions stored thereon that, when executed by a computing device, cause the computing device to perform a method for a server to deliver a content item to a first device and a second device, the method comprising:

storing, in a database of the server, an identifier unique to the first device and an identifier unique to the second device;

receiving, from the first device, a first request for the content item and a first identifier associated with the first device;

requesting a first set of encryption keys in response to a first verification that the first identifier matches the identifier unique to the first device stored in the database;

receiving, from a key management server, the first set of encryption keys in response to the request for the first set of encryption keys;

receiving a plurality of file segments of the content item;

associating, in the database of the server, the first set of encryption keys with the content item and the identifier unique to the first device;

generating a first session-specific playlist including a first plurality of session-specific file segment URLs corresponding to the plurality of file segments, wherein a session-specific file segment URL of the first plurality of session-specific file segment URLs includes a filename of a corresponding file segment of the plurality of file segments appended with a session identification corresponding to a first session;

generating a first encrypted segment by encrypting a file segment of the plurality of file segments using a first encryption key of the first set of encryption keys;

receiving, from the second device, a second request for the content item and a second identifier associated with the second device;

requesting a second set of encryption keys different from the first set of encryption keys in response to a second verification that the second identifier matches the identifier unique to the second device stored in the database;

receiving, from the key management server, the second set of encryption keys in response to the request for the second set of encryption keys;

associating, in the database of the server, the second set of encryption keys with the content item and the identifier unique to the second device;

generating a second session-specific playlist including a second plurality of session-specific file segment URLs corresponding to the plurality of file segments, wherein a session-specific file segment URL of the second plurality of session-specific file segment URLs includes a filename of a corresponding file segment of the plurality of file segments appended with a session identification corresponding to a second session;

generating a second encrypted segment by encrypting the file segment of the plurality of file segments using a second encryption key of the second set of encryption keys; and

delivering the first encrypted segment to the first device and the second encrypted segment to the second device.