Authorisation and Authentication

• US 20080320300A1
• Filed: 12/04/2006
• Published: 12/25/2008
• Est. Priority Date: 12/22/2005
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Costa, Manuel, Miller, John, Gkantsidis, Christos, Rodriguez, Pablo Rodriguez, Ranson, Stuart, Hydrie, Aamer, See-Mong, Tan
• Application Number:
  US12/097,926
• Publication Number:
  US 20080320300A1
• Time in Patent Office: Days
• US Class Current: 713/158
• CPC Class Codes: G06F 21/1085 Content sharing, e.g. peer-to-peer [P2P]

Abstract

The invention relates to content distribution over a network and provides methods of controlling the distribution, of receiving the content and of publishing content. The method of controlling distribution of content over a network includes receiving a content description and location information for a source of the content from a publisher, where the content description comprises authorisation details associated with the publisher. The validity of the authorisation details is checked and if found to be valid, the content description is provided to a node in the network

Claims

1. A method of controlling distribution of content over a network comprising:

receiving a content description and location information for a source of the content from a publisher, the content description comprising authorization details associated with the publisher;

checking the validity of the authorization details; and

if the authorization details are valid, providing the content description to a node in the network.

2. A method according to claim 1, wherein the content description is provided to a node in response to a request from the node.

3. A method according to claim 1 further comprising:

confirming an identity of the node prior to providing the content description to the node.

4. A method according to claim 1, wherein the authorization details associated with a publisher comprises details of a certificate issued by a certificate issuing entity, and wherein checking the validity of the authorization details comprises:

accessing a certificate revocation list issued by the certificate issuing entity; and

determining if the certificate is on the certificate revocation list.

5. A method according to claim 4, further comprising:

storing the certificate revocation list; and

providing the certificate revocation list to a node in the network in response to a request from the node.

6. A method according to claim 1, further comprising:

maintaining a list of nodes that are connected to the network and that hold at least part of the content; and

providing at least a portion of the list of nodes to a node in the network in response to request from the node.

7. A method according to claim 6 further comprising:

confirming an identity of the node prior to providing the at least a portion of the list of nodes.

8. A computer program comprising computer program code means adapted to perform all the steps of claim 1 when the program is run on a computer.

9. A method of receiving content being distributed over a network comprising:

receiving a content identifier and a tracker pointer;

requesting a content description from a first tracker identified from the tracker pointer, the content description comprising authorization details associated with a publisher of the content;

receiving the content description;

checking the validity of the authorization details;

receiving information on a source of the content from a second tracker; and

requesting a portion of the content from the source.

10. A method according to claim 9, wherein the first and the second trackers are the same.

11. A method according to claim 10, wherein the content description further comprises the information on the source of the content.

12. A method according to claim 9, wherein the content description further comprises information identifying the second tracker.

13. A method according to claim 12, wherein the authorization details associated with a publisher comprises details of a certificate issued by a certificate issuing entity, and wherein checking the validity of the authorization details comprises:

accessing a certificate revocation list issued by the certificate issuing entity; and

determining if the certificate is on the certificate revocation list.

14. A method according to claim 13, further comprising:

providing identification information to the first tracker prior to receiving the content description.

15. A method according to claim 14, further comprising:

providing identification information to the source; and

requesting identification information from the source.

16. A method according to claim 15, further comprising:

receiving the portion of the content from the source;

checking the validity of the portion of the content; and

if the portion is not valid, blocking communication with the source for a period of time.

17. A computer program comprising computer program code means adapted to perform all the steps of claim 9 when the program is run on a computer.

18. A method of publishing content for distribution over a network, the method comprising:

requesting authorization to publish;

receiving authorization details;

creating a content description comprising the authorization details; and

transmitting the content description and location information for a source of the content to a tracker server.

19. A method according to claim 18, wherein requesting authorization comprises requesting a certificate from a certificate issuing entity, and wherein the authorization details comprise details of the certificate.

20. A computer program comprising computer program code means adapted to perform all the steps of claim 18 when the program is run on a computer.