System and method for enforcing network cluster proximity requirements using a proxy

• US 20060233372A1
• Filed: 12/16/2004
• Published: 10/19/2006
• Est. Priority Date: 12/16/2004
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Shaheen, Amal Ahmed, McGuire, Tommy
• Granted Patent: US 7,519,181 B2
• Time in Patent Office: Days
• US Class Current: 380/255
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A system, method and computer program for enforcing network cluster proximity requirements using a proxy is useful in preventing unauthorized devices from receiving encrypted broadcast content intended for only authorized users within a network cluster. The current art allows users to remotely establish trust via a cryptographic handshake. This results in encrypted broadcast content being delivered to unauthorized devices. The present invention assures that encrypted broadcast content is delivered to only authorized devices, allowing authorized remote devices to receive encrypted broadcast content while preventing unauthorized remote devices from doing so. The present invention enforces network proximity requirements to authorized devices within a defined area by timing the cryptographic handshaking, and by authorizing device proxies within a geographic area for retransmitting to authorized remote devices outside said geographic area.

Claims

1. A communication network system for delivering broadcast content to authorized devices comprising:

a device authorization unit for authorizing devices within a geographic area via cryptographic handshaking;

a timer for timing the cryptographic handshaking process;

a content delivery unit for delivering broadcast content only to authorized devices within said geographic area; and

one or more device proxies, wherein said device proxies are authorized devices within the geographic area and are enabled to send broadcast content to authorized devices outside of said geographic area.

2. The communication network system of claim 1 wherein the timer identifies authorized devices by length of time of transmission.

3. The communication network system of claim 1 wherein the device proxies comprise hardware facilities.

4. The communication network system of claim 3 wherein the hardware facilities use location information to enforce network cluster proximity requirements.

5. The communication network system of claim 3 wherein the hardware facilities use information from the authorized devices to enforce network cluster proximity requirements.

6. The communication network system of claim 1 wherein the device proxies comprise a home network system which communicates with other network compliant devices to enforce network cluster proximity requirements.

7. The communication network system of claim 6 wherein a network compliant device is a cellular telephone.

8. A method for delivering broadcast content to authorized devices including the steps of:

initiating cryptographic handshaking with a device;

designating said device as an authorized device if said cryptographic handshaking is successful;

timing said cryptographic handshaking;

limiting the delivery of said broadcast content to only said authorized devices within a geographic area based on said timing; and

authorizing one or more device proxies within said geographic area for retransmitting broadcast content to authorized remote devices outside of said geographic area.

9. The method of claim 8 wherein authorized devices are identified by length of time of transmission.

10. The method of claim 8 wherein the device proxies comprise hardware facilities.

11. The method of claim 10 wherein the hardware facilities use location information to enforce network cluster proximity requirements.

12. The method of claim 10 wherein the hardware facilities use information from the authorized devices to enforce network cluster proximity requirements.

13. The method of claim 8 wherein the device proxies comprise a home network system which communicates with other network compliant devices to enforce network cluster proximity requirements.

14. The method of claim 13 wherein a network compliant device is a cellular telephone.

15. A computer program having code recorded on a computer readable medium for fast communication with a symbol linked object based system in a communication network for delivering encrypted broadcast content to authorized devices comprising:

means for enforcing network cluster proximity requirements to authorized devices within a defined geographic area via cryptographic handshaking;

means for timing said cryptographic handshaking to limit the delivery of said encrypted broadcast content to only said authorized devices within said geographic area; and

means for authorizing device proxies within said geographic area for retransmitting to authorized remote devices outside of said geographic area, the encrypted broadcast content delivered to said device proxies.

16. The computer program of claim 15 wherein authorized devices are identified by length of time of transmission.

17. The computer program of claim 15 wherein the device proxies comprise hardware facilities.

18. The computer program of claim 17 wherein the hardware facilities use location information to enforce network cluster proximity requirements.

19. The computer program of claim 17 wherein the hardware facilities use information from the authorized devices to enforce network cluster proximity requirements.

20. The computer program of claim 15 wherein the device proxies comprise a home network system which communicates with other network compliant devices to enforce network cluster proximity requirements.