Methods, systems and devices for packet watermarking and efficient provisioning of bandwidth

• US 20090210711A1
• Filed: 03/23/2009
• Published: 08/20/2009
• Est. Priority Date: 04/17/2002
• Status: Active Grant

• Current Assignee: Wistaria Trading Inc.
• Original Assignee: Scott A. Moskowitz
• Inventors: Moskowitz, Scott A.
• Granted Patent: US 8,104,079 B2
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0641 Shopping interfaces
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 65/61 for supporting one-way streaming services, e.g. Internet radio
• CPC Class Codes: H04N 1/32128 attached to the image data, e.g. file header, transmitted message header, information on the same page or in the same computer file as the image for information embedded in the image H04N1/32144
• CPC Class Codes: H04N 2201/3205 of identification information, e.g. name or ID code H04N2201/3209 takes precedence
• CPC Class Codes: H04N 2201/3222 of processing required or performed, e.g. forwarding, urgent or confidential handling
• CPC Class Codes: H04N 2201/3233 of authentication information, e.g. digital signature, watermark
• CPC Class Codes: H04N 2201/3246 of data relating to permitted access or usage, e.g. level of access or usage parameters for digital rights management [DRM] related to still images

Abstract

Disclosed herein are methods and systems for transmitting streams of data. The present invention also relates to generating packet watermarks and packet watermark keys. The present invention also relates to a computerized system for packaging data for transmission to a user. The system may utilize computer code to generate a bandwidth rights certificate that may include: at least one cryptographic credential; routing information for the transmission; and, optionally, a digital signature of a certificate owner; a unique identification code of a certificate owner; a certificate validity period; and pricing information for use of bandwidth. The present invention also relates to an electronic method and system for purchasing good and services by establishing an account whereby a customer is credited with a predetermined amount of bandwidth usage, and then charges are assessed against the account in an amount of bandwidth usage which corresponds to the agreed upon purchase value for the selected item.

Claims

1-82. -82. (canceled)

83. A process for provisioning a stream of data, comprising:

receiving a stream of data;

organizing the stream of data into a packet flow comprising a plurality of packets;

generating a packet watermark associated with the packet flow wherein the packet watermark enables discrimination between packet flows;

combining the packet watermark with each of the plurality of packets to form watermarked packets; and

provisioning at least one of the watermarked packets across a network.

84. The process of claim 83, further comprising:

receiving at least one packet that has been transmitted across a network;

analyzing the identity of at least one packet using at least a portion of the packet watermark; and

in the event the analysis indicates authentication of the at least one packet, permitting the provisioning of the at least one packet, and in the event that the analysis indicates tampering of the at least one packet, indicating a signal of tampering.

85. The process of claim 83, further comprising:

receiving at least one packet that has been provisioned across a network;

determining the integrity of a portion of the packet flow using at least a portion of the packet watermark; and

in the event the analysis indicates integrity of the portion of the packet flow, permitting the provisioning of the packet flow, and in the event that the analysis indicates tampering of portion of the packet flow, indicating a signal of tampering.

86. The process of claim 83, wherein the step of generating a packet watermark comprises:

generating a watermark packet key;

associating a unique identifier with the watermark packet key; and

generating a packet watermark comprising the unique identifier associated with the watermark packet key.

87. The process of claim 83, wherein the step of generating a packet watermark comprises:

generating a watermark packet key;

associating a unique identifier with the watermark packet key;

assigning a quality of service level to the packet flow; and

generating a packet watermark comprising;

the unique identifier associated with the watermark packet key; and

the quality of service level assigned to the packet flow.

88. The process of claim 84, wherein the step of analyzing the authenticity of the at least one packet is based on predetermined criteria selected from the group comprising:

a quality or quantity of the stream of data, willingness to pay for the stream of data, pricing for the stream of data, access to the stream of data, differential quality of service, reputation or recognition of the stream of data, reputation or recognition of the origin of the stream of data, related packet flows, meta-data or XML associated with a related stream of data, intrusion detection techniques, virus detection techniques, Ethernet IDs, port IDs, URLs, DNS addresses, a prior history, a logical context of the origin of the stream of data, or combinations thereof.

89. The process of claim 85, wherein the step of determining the integrity of the portion of the packet flow is based on predetermined criteria selected from the group comprising:

a quality or quantity of the packet flow, willingness to pay for the packet flow, pricing for the packet flow, access to the packet flow, differential quality of service, reputation or recognition of the packet flow, reputation or recognition of the origin of the packet flow, related packet flows, meta-data or XML associated with a related packet flow, intrusion detection techniques, virus detection techniques, Ethernet IDs, port IDs, URLs, DNS addresses, a prior history, a logical context of the origin of the packet flow, or combinations thereof.

90. The process of claim 83, wherein the step of generating a packet watermark comprises:

generating a watermark packet key;

associating a unique identifier with the watermark packet key;

assigning a quality of service level to the packet flow; and

generating a hash output for a portion of the packet flow; and

generating a packet watermark comprising;

the unique identifier associated with the watermark packet key;

the quality of service level assigned to the packet flow; and

the hash output for the portion of the packet flow.

91. The process of claim 83, further comprising:

receiving a plurality of packets that have been provisioned across a network; and

analyzing at least a predetermined minimal number of the plurality of packets for a packet watermark to authenticate each of the at least predetermined minimal number of packets using the packet watermark, wherein the predetermined minimal number is determined based on one of a quality of the packet flow being provisioned or a quantity of the packet flow being provisioned.

92. The process of claim 91, further comprising:

in the event that the analysis does not authenticate at least one of the plurality of packets, modifying the packet flow being provisioned so that the data is either degraded in quality or degraded in quantity.

93. The process of claim 91, further comprising:

in the event that the analysis authenticates at least one of the plurality of packets, prioritizing the data being provisioned.

94. A system for provisioning a stream of data, comprising:

a processor to receive a stream of data and to organize the stream of data into a packet flow comprising a plurality of packets;

a generator to generate at least one packet watermark associated with the packet flow;

a packager to combine the generated packet watermark with at least one of the plurality of packets to form watermarked packets; and

an provisioner to provision at least one of the watermarked packets across a network.

95. The system of claim 94, further comprising a router, which router comprises:

a network receiver to receive a packet that has been provisioned across a network; and

a network processor coupled to the network receiver for analyzing the packet for a packet watermark that can be used to provision the associated packet flow.

96. The system of claim 95, wherein the network processor creates one of differential quality of service or uniquely identifiable packet flow.

97. The system of claim 94, wherein the stream of data comprises content selected from the group comprising:

aesthetic data;

functional data;

payment data, willingness to pay data;

authenticated data;

verified data, authorized data, reputation or recognition data;

or combinations thereof.

98. The system of claim 94, wherein the module of the generator further generates a hash output for a portion of the packet flow, and the packet watermark that is generated comprises the hash output for the portion of the packet flow, the unique identifier associated with the watermark packet key, and the quality of service level associated with the packet flow.

99. The system of claim 94, wherein the packet watermark is steganographic, cryptographic or both steganographic and cryptographic.

100. The system of claim 94, wherein the generated packet watermark is associated with the packet flow based on a predetermined criteria selected from one of:

identification, authentication, authorization, or data integrity of the associated packet flow.

101. A method of authenticating a packet flow, comprising:

receiving digital content;

organizing the digital content into a packet flow comprising at least two packets;

generating at least a portion of a packet watermark associated with at least one of the packets, the packet watermark being associated with authentication data;

combining the at least one portion of a packet watermark, and the at least one packet, for transmission across a network;

receiving the combined at least one portion of a packet watermark, and the at least one packet that has been transmitted across the network;

analyzing the combined at least one portion of a packet watermark, and the at least one packet using the at least a portion of the packet watermark; and

in the event the analysis indicates authentication of the at least one packet, permitting the authentication of the packet flow, and in the event that the analysis indicates tampering of the at least one packet, indicating a signal of non-authentication.

102. The method of claim 101, further comprising:

generating a bandwidth rights certificate comprising;

at least one cryptographic credential; and

routing information selected from the group consisting of authorization data to authorize use of at least one particular router and priority data to prioritize use of at least one particular router; and

combining the bandwidth rights certificate, the at least one portion of a packet watermark, and the at least one packet of data, for transmission across a network.

103. A computerized system for provisioning data flow for transmission to a user, comprising:

a receiver to receive digital content;

computer code to organize the digital content into data flow comprising at least two packets;

computer code to generate a packet watermark associated with at least one of the packets the packet watermark being associated with identification of the data flow;

computer code to combine the packet watermark and the at least one packet for provisioning the data flow across a network.

104. The system of claim 103, further comprising:

computer code to generate a bandwidth rights certificate comprising;

at least one cryptographic credential; and

routing information selected from the group consisting of authorization data to authorize use of at least one particular router and priority data to prioritize use of at least one particular router; and

computer code to combine the bandwidth rights certificate, the packet watermark, and the at least one packet, for provisioning the data flow across a network.

105. The system of claim 103, wherein the system is configured to operate on a hardware device selected from the group consisting of:

a personal computer, a cable box, a telephone, a cellular telephone, a personal digital assistant, a personal music playback device, and a smart card.

106. The system of claim 103, wherein the system transmits across a network each of the plurality of packets, together with its respective associated packet watermark, the system further comprising:

a network device to receive the transmitted packets, which network device reassembles the data flow, at least in part, in a prioritized manner, starting with those packets that are perceptually significant, functionally significant, or both.

107. The system of claim 105, wherein the hardware device verifies one of a source, origin, contents, destination or combinations thereof for the packet or data flow.