Secure data delivery

• US 20040030921A1
• Filed: 05/02/2003
• Published: 02/12/2004
• Est. Priority Date: 05/04/2002
• Status: Abandoned Application

• Current Assignee: Foldermail Ltd.
• Original Assignee: Foldermail Ltd.
• Inventors: Gaffney, Philip Michael, Aldridge, Jane
• Application Number:
  US10/428,287
• Publication Number:
  US 20040030921A1
• Time in Patent Office: Days
• US Class Current: 713/200
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

The invention relates to secure delivery of data over communications networks, and in particular to the secure delivery of large datasets.

One aspect of the invention is the preparation of a dataset (1) for secure transmission comprising the steps of scrambling the data set according to a first key (22) splitting the dataset into blocks (14-19) and ordering the blocks according to a second key (23). The dataset can then be split and stored between a plurality of servers on the network.

Another aspect of the invention is the secure download of blocks of data over a communications network comprising the steps of downloading blocks to a client device in an apparently random order according to a download key or keys, independently sending the key or keys to the client device and reordering the blocks in accordance with the key or keys.

Claims

1. A method of preparing a dataset for secure transmission over a communications network, comprising the steps of:

scrambling the dataset according to a first key;

splitting the dataset into a plurality of blocks; and

ordering the blocks according to a second key.

2. A method according to claim 1, wherein the dataset is split into the plurality of blocks before or after the scrambling process.

3. A method according to claim 1, wherein the dataset is split into the plurality of blocks during the scrambling process.

4. A method according to claim 3, wherein the scrambling process comprises the steps of:

splitting the dataset into a plurality of segments;

grouping sets of segments; and

,

forming blocks corresponding to the groups of segments, wherein each block includes data from every segment in the corresponding group.

5. A method according to any preceding claim, wherein the dataset includes a plurality of files, further comprising the step of augmenting the dataset to include information that defines how each file may be extracted from the dataset.

6. A method according to any preceding claim, wherein the dataset is a directory, further comprising the step of generating a description of the directory structure prior to scrambling.

7. A method according to any preceding claim, further comprising the step of configuring each block of data according to a protocol to make it look like a file.

8. A method according to claim 7, wherein each block of data is configured such that it can be served by a standard web server.

9. A method according to any preceding claim, further comprising the step of labelling each block with an identical time and date of creation.

10. A method according to any preceding claim, further comprising the step of giving each block a file name derived partially or fully from the contents of the block.

11. A method according to any preceding claim, wherein the blocks are uploaded to a plurality of servers such that no one server contains the entire dataset.

12. A computer program product comprising computer program code means adapted to perform all of the steps of any of the preceding claims when said program is run on a computer.

13. A computer program according to claim 12 embodied on a computer readable medium.

24. A method according to claim 23, wherein the dataset is prepared according to any one of claims 1-10, further comprising the step of unscrambling the data set in accordance with the first and second keys.

25. A method according to claim 24, wherein the dataset is stored on the client device in scrambled form and is unscrambled when accessed by a user with the first key.

26. A method according to claim 25, wherein portions of the dataset may be unscrambled whilst the remainder of the dataset remains scrambled.

14. A system for preparing a dataset for secure transmission over a communications network, comprising:

means for scrambling the dataset according to a first key;

means for splitting the dataset into a plurality of blocks; and

means for uploading the blocks in a different order according to a second key.

15. A system according to claim 14, wherein the dataset comprises a plurality of files, further comprising means for augmenting the dataset to include information that defines how each file may be extracted from the dataset.

16. A system according to claim 14 or 15, wherein the dataset is a directory, further comprising means for generating a description of the directory structure prior to scrambling.

17. A system according to claim 14, 15 or 16, further comprising means for wrapping each block of data in an alternative protocol to make it look like a file.

18. A system according to any one of claims 14 to 17, further comprising means to give each block a file name derived partially or fully from the contents of the block.

19. A system according to any one of claims 14 to 18, further comprising means for uploading the blocks to a plurality of servers such that no one server contains the entire dataset.

34. A system according to claim 32 or 33, further comprising the features of any one of claims 14-19.

20. A method of transferring a dataset, comprising a plurality of blocks of data across a communications network from one or more servers to a client device, comprising the steps of:

downloading the blocks to the client device in an order according to a download key or keys;

independently sending the download key or keys to the client device; and

,

reordering the blocks in accordance with the key or keys.

21. A method according to claim 20, wherein at least one download key is unique to the client device or a user of the client device.

22. A method according to claim 21, wherein the download key is fully or partially derived from data identifying the client device hardware.

23. A method according to claim 20, 21 or 22, wherein the dataset is scrambled according to a further key or keys, and the further key or keys are independently sent to the client device.

27. A method according to any one of claims 20-26, wherein the data is software.

28. A method according to any one of claims 20-27, wherein the dataset is formed from a plurality of portions of a larger dataset, and wherein the method further includes the step of recombining the dataset with the remainder of the larger dataset on the client device.

29. A method according to any one of claims 20-27, wherein the dataset is an update to an existing client dataset, and wherein a description file is provided which indicates where the updates fit into the existing dataset.

30. A computer program product comprising computer program code means adapted to perform all of the steps of any one of claims 20-29 when said program is run on a computer network.

31. A computer program according to claim 30 embodied on a computer readable medium.

32. A system for transferring a dataset, comprising a plurality of blocks of data across a communications network from one or more servers to a client device, comprising:

means for downloading the blocks to the client device in an order according to a download key or keys;

means for independently sending the download key or keys to the client device; and

,

means for reordering the blocks in accordance with the key or keys.

33. A system according to claim 32, wherein at least one download key is unique to the client device or a user of the client device.

35. An encrypted dataset derived from an original dataset, comprising a plurality of blocks of data ordered according to a second key, wherein each block contains data from the original dataset in accordance with a first key.