System for distributing information using a secure peer-to-peer network

• US 20060075083A1
• Filed: 09/22/2005
• Published: 04/06/2006
• Est. Priority Date: 09/22/2004
• Status: Abandoned Application

• Current Assignee: CyberDefender Corp.
• Original Assignee: CyberDefender Corp.
• Inventors: Liu, Bing
• Application Number:
  US11/233,868
• Publication Number:
  US 20060075083A1
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: G06F 11/2294 by remote test
• CPC Class Codes: G06F 21/1077 Recurrent authorisation
• CPC Class Codes: G06F 21/568 eliminating virus, restoring damaged files
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/1057 involving pre-assessment of levels of reputation of peers
• CPC Class Codes: H04L 67/1063 Discovery through centralising entities
• CPC Class Codes: H04L 67/1072 Discovery involving ranked list compilation of candidate peers
• CPC Class Codes: H04L 67/108 characterised by resources being split in blocks or fragments
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A secure peer-to-peer network including servers and peer computers that are connected via a network are described. In one aspect of the invention, the reliability of information provided by one peer to another can be verified. One embodiment includes a server connected to a network and a first peer computer connected to the network. In addition, the first peer computer is configured to communicate requests for information to the server, wherein the server is configured to respond to requests for information by providing the identity of at least a second peer computer, wherein the requested information is stored on the second peer computer, wherein the first peer computer is configured to obtain the requested information from the second peer computer and the first peer computer is configured to obtain from the server information to verify the reliability of the information provided by the second peer computer.

Claims

1. A secure peer-to-peer network, comprising:

a server connected to a network;

a first peer computer connected to the network;

wherein the first peer computer is configured to communicate requests for information to the server;

wherein the server is configured to respond to requests for information by providing the identity of at least a second peer computer;

wherein the requested information is stored on the second peer computer; and

wherein the first peer computer is configured to obtain the requested information from the second peer computer;

wherein the first peer computer is configured to obtain from the server information to verify the reliability of the information provided by the second peer computer.

2. The secure peer-to-peer network of claim 1, wherein:

a computer program is installed on at least one of the peer computers; and

the information received by the peer is information enabling the modification of the computer program.

3. The secure peer-to-peer network of claim 1, wherein the server is configured to provide verification information to a peer computer upon request.

4. The secure peer-to-peer network of claim 3, wherein the verification information includes at least one checksum.

5. The secure peer-to-peer network of claim 3, wherein:

the information obtained from the second peer computer is encrypted; and

the verification information enables the decryption of the information obtained from the second peer computer.

6. The secure peer-to-peer network of claim 1, wherein the server is configured to provide verification information to a peer computer possessing the required digital rights upon request.

7. The secure peer-to-peer network of claim 6, wherein the server is configured to provide an option to acquire required digital rights to a peer computer requesting verification information, when the peer computer does not possess the required digital rights.

8. The secure peer-to-peer network of claim 7, wherein the information includes audio information.

9. The secure peer-to-peer network of claim 8, wherein the information also includes video information.

10. A server, comprising:

hosted information stored on the server;

a list identifying computers, where the list is stored on the server; and

verification information stored on the server;

wherein the list identifying computers identifies a number of computers that acquired the hosted information at some point in the past;

wherein the verification information can be derived from the hosted information in accordance with a predetermined algorithm.

11. The server of claim 10, wherein the list identifying computers includes computers that have obtained the verification information from the server.

12. The server of claim 10, wherein the server is configured to respond to requests for the hosted information by providing the list identifying computers unless the list does not identify any computers.

13. The server of claim 10, wherein the server is configured to provide the verification information upon request.

14. The server of claim 10, wherein:

the hosted information is subject to digital rights management; and

the server is configured to provide verification information in response to a request from a device possessing the digital rights required to use the hosted information.

15. The server of claim 10, wherein the list identifying computers identifies a maximum of 100 computers.

16. The server of claim 15, wherein the list identifying computers identifies a maximum of 50 computers.

17. The server of claim 16, wherein the list identifying computers identifies a maximum of 20 computers.

18. A computer configured to obtain information, comprising:

software;

wherein the software configures the computer to enable it to request information from a server;

wherein the software configures the computer to receive peer tables from a server;

wherein the software configures the computer to send requests for information to computers listed in a received peer table;

wherein the software configures the computer to send requests to a server for verification information relating to information received from other computers;

wherein the software configures the computer to verify the reliability of information received from other computers using verification information received from the server.

19. The computer of claim 18, wherein the software configures the computer to request information from the server at least once a week.

20. The computer of claim 19, wherein the software configures the computer to request information from the server at least once a day.

21. The computer of claim 20, wherein the software configures the computer to request information from the server at least once every eight hours.

22. A method of obtaining information comprising:

contacting a server to request the information;

receiving information identifying peer computers possessing the information from the server;

contacting the peer computers to request the information;

receiving the information;

contacting the server for verification information; and

verifying the reliability of the information.

23. The method of claim 22, wherein the information is provided by a peer computer.

24. The method of claim 22, wherein the information is provided by a server.

25. The method of claim 22, further comprising obtaining the digital rights to use the received information.