Digital media content distribution blocking

• US 10,230,690 B2
• Filed: 03/23/2017
• Issued: 03/12/2019
• Est. Priority Date: 03/23/2017
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Cleaver, James D., Costello, Sean R., Harrer, Stefan, Plant, Laurence J.
• Primary Examiner(s): Avery, Jeremiah L
• Application Number:
  US15/467,098
• Publication Number:
  US 20180278582A1
• Time in Patent Office: 719 Days
• Field of Search: None
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

A method and system for improving a digital media content transfer blocking process is provided. The method includes detecting a request for access to digital media content from a digital media provider system. Network traffic across the network is identified and it is verified that the digital media content is comprised by the network traffic. In response, investigation platform software code is executed and a database system associated with the digital media provider system is queried. A system determines if a legitimate connection based relationship exists between a user device and the digital media provider system and the digital media content is monitored. The digital media content is determined to be unauthorized for use by said user and in response the digital media content is disabled from executing functions with respect to the user device of a user.

Claims

1. An Internet based digital media content transfer blocking improvement method comprising:

detecting, by a processor of a detection hardware device, a user request, from a user device for access to digital media content from a digital media provider system;

detecting, by said processor, said digital media content being transmitted from said digital media provider system to a network;

identifying, by said processor executing a network hardware probe of said detection hardware device, network traffic across said network;

executing, by said processor, an analytical software engine of said detection hardware device;

verifying, by said processor executing said analytical software engine, that said digital media content is comprised by said network traffic;

executing, by said processor in response to results of verifying, investigation platform software code;

querying, by said processor, a database system associated with said digital media provider system;

determining, by said processor based on results of said querying, if a legitimate connection based relationship exists between said user and said digital media provider system;

monitoring, by said processor, said digital media content;

additionally determining, by said processor based on results of said monitoring, that said digital media content is not authorized for use by said user; and

disabling, by said processor based on said determining that said digital media content is not authorized for use by said user, said digital media content from executing functions with respect to said user device of said user.

2. The method of claim 1, wherein said disabling said digital media content comprises:

blocking, within said detection hardware device, said digital media content from reaching said user device.

3. The method of claim 1, wherein said digital media content comprises encrypted digital media content, and wherein said method further comprises:

transmitting by said processor to said digital media provider system, a request for providing a decrypt key associated with decrypting said encrypted digital media content for said user device;

first determining, by said processor, that a specified period of time has elapsed since said transmitting; and

second determining, by said processor based on results of said first determining, that said decrypt key has not been received by said user device, wherein said disabling said digital media content is based on results of said second determining.

4. The method of claim 1, wherein said disabling said digital media content comprises:

detecting a location of said user device;

disabling a network connection to said user device; and

notifying an authority system that said digital media content is not authorized for use by said user.

5. The method of claim 1, further comprising:

logging, by said processor, results of said determining that said digital media content is not authorized for use by said user; and

storing, by said processor in a logging database, log data describing results of said logging.

6. The method of claim 1, wherein said network comprises a structure comprising four independent layers.

7. The method of claim 1, wherein said network hardware probe comprises specialized hardware and software configured to perform said identifying.

8. The method of claim 1, wherein said verifying that said that said digital media content is comprised by said network traffic comprises:

ingesting said digital media content from said network probe; and

inspecting said ingested digital media content.

9. The method of claim 1, wherein said digital media content is selected from the group consisting of a digital media stream and a digital media file.

10. The method of claim 1, further comprising:

determining, by said processor based on results of said monitoring, that said digital media content comprises illicit content, wherein said disabling is further based on said determining that said digital media content comprises illicit content.

11. The method of claim 1, further comprising:

providing at least one support service for at least one of creating, integrating, hosting, maintaining, and deploying computer-readable code in the control hardware, said code being executed by the computer processor to implement;

said detecting said user request, said detecting said digital media content, said identifying, said executing said analytical software engine, said verifying, said executing said investigation platform software code, said querying, said determining, said monitoring, said additionally determining, and said disabling.

12. A computer program product, comprising a computer readable hardware storage device storing a computer readable program code, said computer readable program code comprising an algorithm that when executed by a processor of a detection hardware device implements an Internet based digital media content transfer blocking improvement method, said method comprising:

detecting, by said processor, a user request from a user device for access to digital media content from a digital media provider system;

detecting, by said processor, said digital media content being transmitted from said digital media provider system to a network;

identifying, by said processor executing a network hardware probe of said detection hardware device, network traffic across said network;

executing, by said processor, an analytical software engine of said detection hardware device;

verifying, by said processor executing said analytical software engine, that said digital media content is comprised by said network traffic;

executing, by said processor in response to results of verifying, investigation platform software code;

querying, by said processor, a database system associated with said digital media provider system;

determining, by said processor based on results of said querying, if a legitimate connection based relationship exists between said user and said digital media provider system;

monitoring, by said processor, said digital media content;

additionally determining, by said processor based on results of said monitoring, that said digital media content is not authorized for use by said user; and

disabling, by said processor based on said determining that said digital media content is not authorized for use by said user, said digital media content from executing functions with respect to said user device of said user.

13. The computer program product of claim 12, wherein said disabling said digital media content comprises:

blocking, within said detection hardware device, said digital media content from reaching said user device.

14. The computer program product of claim 12, wherein said digital media content comprises encrypted digital media content, and wherein said method further comprises:

transmitting by said processor to said digital media provider system, a request for providing a decrypt key associated with decrypting said encrypted digital media content for said user device;

first determining, by said processor, that a specified period of time has elapsed since said transmitting; and

second determining, by said processor based on results of said first determining, that said decrypt key has not been received by said user device, wherein said disabling said digital media content is based on results of said second determining.

15. The computer program product of claim 12, wherein said disabling said digital media content comprises:

detecting a location of said user device;

disabling a network connection to said user device; and

notifying an authority system that said digital media content is not authorized for use by said user.

16. The computer program product of claim 12, wherein said method further comprises:

logging, by said processor, results of said determining that said digital media content is not authorized for use by said user; and

storing, by said processor in a logging database, log data describing results of said logging.

17. The computer program product of claim 12, wherein said network comprises a structure comprising four independent layers.

18. The computer program product of claim 12, wherein said network hardware probe comprises specialized hardware and software configured to perform said identifying.

19. The computer program product of claim 12, wherein verifying that said that said digital media content is comprised by said network traffic comprises:

ingesting said digital media content from said network probe; and

inspecting said ingested digital media content.

20. A detection hardware device comprising a processor coupled to a computer-readable memory unit, said memory unit comprising instructions that when executed by the computer processor implements an Internet based digital media content transfer blocking improvement method comprising:

detecting, by said processor, a user request, from a user device, for access to digital media content from a digital media provider system;

detecting, by said processor, said digital media content being transmitted from said digital media provider system to a network;

identifying, by said processor executing a network hardware probe of said detection hardware device, network traffic across said network;

executing, by said processor, an analytical software engine of said detection hardware device;

verifying, by said processor executing said analytical software engine, that said digital media content is comprised by said network traffic;

executing, by said processor in response to results of verifying, investigation platform software code;

querying, by said processor, a database system associated with said digital media provider system;

determining, by said processor based on results of said querying, if a legitimate connection based relationship exists between said user and said digital media provider system;

monitoring, by said processor, said digital media content;

additionally determining, by said processor based on results of said monitoring, that said digital media content is not authorized for use by said user; and

disabling, by said processor based on said determining that said digital media content is not authorized for use by said user, said digital media content from executing functions with respect to said user device of said user.

21. A digital media content blocking improvement method comprising:

detecting, by a processor of a detection hardware device, a user request, from a user device, for access to digital media content from a digital media provider system;

detecting, by said processor, said digital media content being transmitted from said digital media provider system to a network;

identifying, by said processor executing a network hardware probe of said detection hardware device, network traffic across said network;

verifying, by said processor executing an analytical software engine, that said digital media content is comprised by said network traffic;

executing, by said processor in response to results of verifying, investigation platform software code;

first determining, by said processor executing said investigation platform software code, that a Website of said digital media provider system has not been previously accessed by said user;

second determining, by said processor executing said investigation platform software code, that a record of said Web site does not exist with respect to any accounts of said user;

third determining, by said processor executing said investigation platform software code, that said digital media content comprises copyright protected data;

disabling, by said processor based on results of said first determining, said second determining, and said third determining, said digital media content from executing functions with respect to said user device of said user.

22. The method of claim 21, wherein said disabling said digital media content comprises:

blocking, within said detection hardware device, said digital media content from reaching said user device.

23. The method of claim 21, wherein said digital media content comprises encrypted digital media content, and wherein said method further comprises:

transmitting by said processor to said digital media provider system, a request for providing a decrypt key associated with decrypting said encrypted digital media content for said user device;

fourth determining, by said processor, that a specified period of time has elapsed since said transmitting; and

fifth determining, by said processor based on results of said fourth determining, that said decrypt key has not been received by said user device, wherein said disabling said digital media content is based on results of said fourth determining.

24. The method of claim 21, wherein said disabling said digital media content comprises:

detecting a location of said user device;

disabling a network connection to said user device; and

notifying an authority system that said digital media content is not authorized for use by said user.

25. A computer program product, comprising a computer readable hardware storage device storing a computer readable program code, said computer readable program code comprising an algorithm that when executed by a processor implements a digital media content blocking improvement method, said method comprising:

detecting, by said processor, a user request, from a user device for access to digital media content from a digital media provider system;

detecting, by said processor, said digital media content being transmitted from said digital media provider system to a network;

identifying, by said processor executing a network hardware probe of said detection hardware device, network traffic across said network;

verifying, by said processor executing an analytical software engine, that said digital media content is comprised by said network traffic;

executing, by said processor in response to results of verifying, investigation platform software code;

first determining, by said processor executing said investigation platform software code, that a Website of said digital media provider system has not been previously accessed by said user;

second determining, by said processor executing said investigation platform software code, that a record of said Web site does not exist with respect to any accounts of said user;

third determining, by said processor executing said investigation platform software code, that said digital media content comprises copyright protected data; and

disabling, by said processor based on results of said first determining, said second determining, and said third determining, said digital media content from executing functions with respect to said user device of said user.