Preventing unauthorized distribution of content on computer networks

• US 20100169195A1
• Filed: 02/03/2006
• Published: 07/01/2010
• Est. Priority Date: 02/03/2005
• Status: Abandoned Application

• Current Assignee: Bernard Trest
• Original Assignee: Bernard Trest
• Inventors: Trest, Bernard
• Application Number:
  US11/814,804
• Publication Number:
  US 20100169195A1
• Time in Patent Office: Days
• US Class Current: 705/34
• CPC Class Codes: G06Q 30/0185 Product, service or business identity fraud
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/1082 involving incentive schemes

Abstract

A method of interfering with unauthorized distribution of protected content via a computer network comprises receiving a query for content from a requesting device connected to the network; determining whether the query relates to the protected content; and in the event that the query relates to the protected content, automatically taking an interfering action in respect of the requesting device. An apparatus, computer program and system of network sentries is also provided.

Claims

1. A method of interfering with unauthorized distribution of protected content via a computer network, the method comprising:

receiving a query for content from a requesting device connected to the network;

determining whether the query relates to the protected content;

in the event that the query relates to the protected content, automatically taking an interfering action in respect of the requesting device.

2. The method of claim 1, wherein the interfering action comprises transmitting at least one false search result to the requesting device in response to the query.

3. The method of claim 2, further comprising:

prior to the transmitting, automatically creating the at least one false search result.

4. The method of claim 3, wherein the creating comprises:

relaying the query to at least one secondary device connected to the network;

obtaining from the at least one secondary device at least one secondary search result that corresponds to the relayed query;

composing the at least one false search result using components of the at least one secondary search result.

5. The method of claim 4, wherein the components relate to one or more files stored by the at least one secondary device and comprise at least one of:

file size;

file name;

file rating;

file hash.

6. The method of claim 2, further comprising:

receiving a request for download that is based on the at least one false search result from the requesting device; and

in response to the request for download, automatically transferring a false file to the requesting client.

7. The method of claim 6, wherein the false file comprises garbage data.

8. The method of claim 7, wherein a hash of the false file is periodically changed.

9. The method of claim 6, wherein contents of the false file are presentable to a user of the requesting device.

10. The method of claim 9, wherein the false file is one or more of:

a text file;

a video file;

a sound file.

11. The method of claim 6, further comprising periodically changing attributes of the false file.

12. The method of claim 6, wherein the false file comprises a portion of the protected content combined with additional presentable content.

13. The method of claim 6, wherein the false file comprises tracking data.

14. The method of claim 13, wherein the tracking data comprises a URL.

15. The method of claim 6, further comprising logging transmission of the false file to the requesting device.

16. The method of claim 4, further comprising:

relaying the query to at least one secondary device connected to a secondary network;

obtaining from the at least one secondary device at least one secondary search result that corresponds to the relayed query;

composing the at least one false search result using components of the at least one secondary search result.

17. The method of claim 6, wherein the query contains a first download speed and the automatically transferring a false file is performed at a second download speed, the second download speed lower than the first download speed.

18. The method of claim 6, further comprising storing a record in a log file of the transferring of the false file.

19. The method of claim 18, wherein the record includes at least one of:

a file name;

a file size;

a date/time; and

a communications address of the requesting device.

20. The method of claim 19, wherein the record further includes a fee chargeable to an owner of the protected content for taking the interfering action.

21. The method of claim 20, wherein the fee is associated with a protection item in a list of the protected content used during the determining.

22. The method of claim 2, wherein the false search result comprises false download data.

23. The method of claim 22, wherein the false download data comprises at least one of:

a false IP address;

a false port number;

a false filename; and

a false hash.

24. The method of claim 2, wherein the at least one false search result comprises at least one electronic file definition.

25. The method of claim 24, wherein each of the at least one electronic file definition respectively comprises a unique file identifier, a file name, and a file size.

26. The method of claim 25, wherein the at least one electronic file definition further comprises a unique hash.

27. The method of claim 2, wherein at least one of the at least one false search result comprises a path to a false file.

28. The method of claim 2, wherein at least one of the at least one false search result is randomly generated.

29. The method of claim 2, wherein at least one of the at least one false search result comprises a message for display to a user of the requesting device.

30. The method of claim 2, wherein the at least one false search result comprises a deterring statement presentable to a user of the requesting device.

31. The method of claim 2, further comprising:

along with the at least one false search result, transmitting at least one valid search result to the requesting device.

32. The method of claim 2, wherein the false search result comprises a download speed.

33. The method of claim 27, wherein a filename of the false file is generated in response to the determining.

34. The method of claim 33, wherein a portion of the filename is randomly generated.

35. The method of claim 2, wherein the false search result comprises a false file path.

36. The method of claim 2, further comprising logging transmission of the false search result to the requesting device.

37. The method of claim 2, further comprising:

receiving a request for download that is based on the at least one false search result from the requesting device; and

in response to the request for download, automatically sending a false file to the requesting client; and

interrupting transfer of the false file prior to completion of the sending.

38. The method of claim 2, further comprising:

prior to the receiving, generating a set of false files and related hashes, wherein the false search results comprise at least one of the related hashes.

39. The method of claim 38, wherein the generating is periodically performed in order to refresh the set of false files and related hashed.

40. The method of claim 1, further comprising:

prior to the receiving a query, obtaining communications addresses of devices connected to the network;

conducting a handshake procedure with the devices using the communications addresses.

41. The method of claim 40, wherein the obtaining comprises accessing at least one server and retrieving the IP addresses and respective port numbers of the devices.

42. The method of claim 41, wherein the at least one server is a web cache accessible by all devices connected to the network.

43. The method of claim 41, wherein the at least one server is accessible on a secondary network.

44. The method of claim 40, wherein the obtaining comprises retrieving the communications addresses from storage.

45. The method of claim 40, wherein the obtaining comprises broadcasting a PING message and receiving PONG messages including the communications addresses.

46. The method of claim 1, wherein the query comprises a communications address of the requesting device and a search criteria.

47. The method of claim 46, wherein the determining comprises comparing the search criteria for matches with a protection item in a list of the protected content.

48. The method of claim 47, further comprising comparing the communications address of the requesting device to a geographic item.

49. The method of claim 48, wherein the geographic item is a geographic region, the method further comprising performing a reverse DNS (Domain Name System) lookup using the communications address of the requesting device to determine whether a geographic location of the requesting device is within the geographic region.

50. The method of claim 47, wherein both of the search criteria and the protection item is a text keyword or phrase.

51. The method of claim 47, further comprising:

prior to the determining, populating the list of the protected content using keywords or phrases relating to content to be protected.

52. The method of claim 1, wherein the network is a peer-to-peer network.

53. The method of claim 1, wherein the requesting device is running one of a Morpheus, Limewire, Bearshare, eMule and Kazaa client.

54. The method of claim 1, wherein the interfering action comprises transmitting a plurality of false search results relating to a single false file at multiple locations on the network to the requesting device in response to the query.

55. The method of claim 54, further comprising randomly generating a subset of the multiple locations.

56. The method of claim 1, wherein the interfering action comprises transmitting a message to a user of the requesting device.

57. An apparatus for interfering with unauthorized distribution of protected content via a computer network, the apparatus comprising:

a communications interface for receiving a query for content from a requesting device connected to the network;

a processor for determining whether the query relates to the protected content;

the processor further for, in the event that the query relates to the protected content, automatically taking an interfering action in respect of the requesting device.

58. The apparatus of claim 57, further comprising:

a storage device for storing a list of the protected content.

59. The apparatus of claim 57, wherein the interfering action comprises instructing a transmitter to transmit at least one false search result via the communications interface to the requesting device in response to the query.

60. The apparatus of claim 59, wherein the processor is further for prior to the instructing, automatically creating the at least one false search result by:

relaying the query via the communications interface to at least one secondary device connected to the network;

obtaining via the communications interface from the at least one secondary device at least one secondary search result that corresponds to the relayed query;

composing the at least one false search result using components of the at least one secondary search result.

61. The apparatus of claim 57, wherein the computer network is a peer-to-peer network.

62. The apparatus of claim 57, wherein the communications interface is further operable to receive messages from a central server via the computer network.

63. The apparatus of claim 57, wherein the communications interface is further operable to receive messages from devices on secondary computer networks.

65. The apparatus of claim 57, wherein the computer network is a Gnutella network.

66. A system for interfering with unauthorized distribution of protected content via a computer network, the system comprising:

a plurality of network sentries, each of the network sentries comprising;

a communications interface for receiving a query for content from a requesting device connected to the network;

a processor for determining whether the query relates to the protected content; and

the processor further for, in the event that the query relates to the protected content, automatically taking an interfering action in respect of the requesting device;

the system further comprising;

a central server in communication with the network sentries for sharing communications addresses of devices connected to the network.

67. The system of claim 66, wherein the central server further comprises:

a storage device for storing a list of the protected content.

68. The system of claim 66, wherein each of the network sentries comprises:

a storage device for storing a list of the protected content.

69. A computer readable medium including a computer program for interfering with unauthorized distribution of protected content via a computer network, the computer program comprising:

computer program code for receiving a query for content from a requesting device connected to the network;

computer program code for determining whether the query relates to the protected content; and

computer program code for in the event that the query relates to the protected content, automatically taking an interfering action in respect of the requesting device.