Methods, systems and devices for packet watermarking and efficient provisioning of bandwidth

• US 20080005572A1
• Filed: 09/10/2007
• Published: 01/03/2008
• Est. Priority Date: 04/17/2002
• Status: Active Grant

• Current Assignee: Wistaria Trading Inc.
• Original Assignee: Scott A. Moskowitz
• Inventors: Moskowitz, Scott
• Granted Patent: US 7,530,102 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0641 Shopping interfaces
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 65/61 for supporting one-way streaming services, e.g. Internet radio
• CPC Class Codes: H04N 1/32128 attached to the image data, e.g. file header, transmitted message header, information on the same page or in the same computer file as the image for information embedded in the image H04N1/32144
• CPC Class Codes: H04N 2201/3205 of identification information, e.g. name or ID code H04N2201/3209 takes precedence
• CPC Class Codes: H04N 2201/3222 of processing required or performed, e.g. forwarding, urgent or confidential handling
• CPC Class Codes: H04N 2201/3233 of authentication information, e.g. digital signature, watermark
• CPC Class Codes: H04N 2201/3246 of data relating to permitted access or usage, e.g. level of access or usage parameters for digital rights management [DRM] related to still images

Abstract

Disclosed herein are methods and systems for transmitting streams of data. The present invention also relates to generating packet watermarks and packet watermark keys. The present invention also relates to a computerized system for packaging data for transmission to a user. The system may utilize computer code to generate a bandwidth rights certificate that may include: at least one cryptographic credential; routing information for the transmission; and, optionally, a digital signature of a certificate owner; a unique identification code of a certificate owner; a certificate validity period; and pricing information for use of bandwidth. The present invention also relates to an electronic method and system for purchasing good and services by establishing an account whereby a customer is credited with a predetermined amount of bandwidth usage, and then charges are assessed against the account in an amount of bandwidth usage which corresponds to the agreed upon purchase value for the selected item.

Claims

1-56. -56. (canceled)

57. A process for transmitting a stream of data, comprising:

receiving a stream of data;

organizing the stream of data into a plurality of packets;

generating a packet watermark associated with the stream of data wherein the packet watermark indicates the integrity of at least one of the plurality of packets;

combining the packet watermark with each of the plurality of packets to form watermarked packets; and

transmitting at least one of the watermarked packets across a network.

58. The process of claim 57, further comprising:

receiving at least one packet that has been transmitted across a network;

analyzing the integrity of at least one packet using at least a portion of the packet watermark; and

in the event the analysis indicates integrity of the at least one packet, permitting the transmission of the at least one packet, and in the event that the analysis indicates tampering of the at least one packet, indicating a signal of tampering.

59. The process of claim 57, further comprising:

receiving at least one packet that has been transmitted across a network;

determining the integrity of a portion of the stream of data using at least a portion of the packet watermark; and

in the event the analysis indicates integrity of the portion of the stream of data, permitting the transmission of the stream of data, and in the event that the analysis indicates tampering of portion of the stream of data, indicating a signal of tampering.

60. The process of claim 57, wherein the step of generating a packet watermark comprises:

generating a watermark packet key;

associating a unique identifier with the watermark packet key; and

generating a packet watermark comprising the unique identifier associated with the watermark packet key.

61. The process of claim 57, wherein the step of generating a packet watermark comprises:

generating a watermark packet key;

associating a unique identifier with the watermark packet key;

assigning a quality of service level to the stream of data; and

generating a packet watermark comprising;

the unique identifier associated with the watermark packet key; and

the quality of service level assigned to the stream of data.

62. The process of claim 58, wherein the step of analyzing the integrity of the at least one packet is based on predetermined criteria selected from the group comprising:

a quality or quantity of the stream of data, willingness to pay for the stream of data, pricing for the stream of data, access to the stream of data, differential quality of service, reputation or recognition of the stream of data, reputation or recognition of the origin of the stream of data, related packet flows, meta-data or XML associated with a related stream of data, intrusion detection techniques, virus detection techniques, Ethernet IDs, port IDs, URLs, DNS addresses, a prior history, a logical context of the origin of the stream of data, or combinations thereof.

63. The process of claim 59, wherein the step of determining the integrity of the portion of the stream of data is based on predetermined criteria selected from the group comprising:

a quality or quantity of the stream of data, willingness to pay for the stream of data, pricing for the stream of data, access to the stream of data, differential quality of service, reputation or recognition of the stream of data, reputation or recognition of the origin of the stream of data, related packet flows, meta-data or XML associated with a related stream of data, intrusion detection techniques, virus detection techniques, Ethernet IDs, port IDs, URLs, DNS addresses, a prior history, a logical context of the origin of the stream of data, or combinations thereof.

64. The process of claim 57, wherein the step of generating a packet watermark comprises:

generating a watermark packet key;

associating a unique identifier with the watermark packet key;

assigning a quality of service level to the stream of data; and

generating a hash output for a portion of the stream of data; and

generating a packet watermark comprising;

the unique identifier associated with the watermark packet key;

the quality of service level assigned to the stream of data; and

the hash output for said portion of the stream of data.

65. The process of claim 57, further comprising:

receiving a plurality of packets that have been transmitted across a network; and

analyzing at least a predetermined minimal number of the plurality of packets for a packet watermark to authenticate each of the at least predetermined minimal number of packets using the packet watermark, wherein the predetermined minimal number is determined based on one of a quality of the stream of data being transmitted or a quantity of the stream of data being transmitted.

66. The process of claim 65, further comprising:

in the event that the analysis does not authenticate at least one of the plurality of packets, modifying the data being transmitted so that the data is either degraded in quality or degraded in quantity.

67. The process of claim 65, further comprising:

in the event that the analysis authenticates at least one of the plurality of packets, prioritizing the data being transmitted.

68. A system for provisioning content, comprising:

a processor to receive content and to organize the content into a plurality of packets;

a generator to generate at least one packet watermark associated with the content;

a packager to combine the generated packet watermark with at least one of the plurality of packets to form watermarked packets; and

a transmitter to transmit at least one of the watermarked packets across a network.

69. The system of claim 68, further comprising a router, which router comprises:

a network receiver to receive a packet that has been transmitted across a network; and

a network processor coupled to the network receiver for analyzing the packet for a packet watermark that can be used to provision the associated content.

70. The system of claim 69, wherein the network processor creates one of differential quality of service or uniquely identifiable packet flow.

71. The system of claim 68, wherein the content comprises a stream of data selected from the group comprising:

aesthetic data;

functional data;

payment data, willingness to pay data;

authenticated data;

verified data, authorized data, reputation or recognition data;

or combinations thereof.

72. The system of claim 68, wherein the module of the generator further generates a hash output for a portion of the content, and the packet watermark that is generated comprises the hash output for said portion of the content, the unique identifier associated with the watermark packet key, and the quality of service level associated with the content.

73. The system of claim 68, wherein the packet watermark is steganographic, cryptographic or both steganographic and cryptographic.

74. The system of claim 68, wherein the generated packet watermark is associated with the content based on a predetermined criteria selected from one of:

identification, authentication, authorization, or data integrity of the associated content.

75. A method of packet watermarking data for transmission, comprising:

receiving content data;

organizing the content data into at least two packets;

generating at least a portion of a packet watermark associated with at least one of the packets of data said packet watermark being associated with authentication information; and

combining the at least one portion of a packet watermark, and the at least one packet of data, for transmission across a network.

76. The method of claim 75, further comprising:

generating a bandwidth rights certificate comprising;

at least one cryptographic credential; and

routing information selected from the group consisting of authorization data to authorize use of at least one particular router and priority data to prioritize use of at least one particular router; and

combining the bandwidth rights certificate, the at least one portion of a packet watermark, and the at least one packet of data, for transmission across a network.

77. A computerized system for packet watermarking data for transmission to a user, comprising:

a receiver to receive content data;

computer code to organize the data into at least two packets;

computer code to generate a packet watermark associated with at least one of the packets of data said packet watermark being associated with authentication information; and

computer code to combine the bandwidth rights certificate, the packet watermark, and the at least one packet, for transmission across a network.

78. The system of claim 77, further comprising:

computer code to generate a bandwidth rights certificate comprising;

at least one cryptographic credential; and

routing information selected from the group consisting of authorization data to authorize use of at least one particular router and priority data to prioritize use of at least one particular router; and

computer code to combine the bandwidth rights certificate, the packet watermark, and the at least one packet, for transmission across a network.

79. The system of claim 77, wherein the system is configured to operate on a hardware device selected from the group consisting of:

a personal computer, a cable box, a telephone, a cellular telephone, a personal digital assistant, a personal music playback device, and a smart card.

80. A system for secure data transmission, comprising:

a receiver to receive data;

a processor to organize the data into a plurality of packets;

a watermark generator to generate at least a portion of a packet watermark associated with at least one packet of data wherein the packet watermark is associated with verification information; and

a transmitter to transmit at least one of the plurality of data packets, its associated packet watermark, across a network.

81. The system of claim 80, wherein the transmitter transmits, one at a time, across a network each of the plurality of data packets, together with its respective associated watermark, said system further comprising:

a network device to receive the transmitted packets, which network device reassembles the data, at least in part, in a prioritized manner, starting with those data packets that are perceptually significant, functionally significant, or both.

82. The system of claim 80, wherein the verification information verifies one of a source, origin, contents, destination or combinations thereof for the associated packet.