Delivering A Content Item From A Server To A Device

• US 20130080777A1
• Filed: 03/29/2012
• Published: 03/28/2013
• Est. Priority Date: 09/23/2011
• Status: Active Grant

• Current Assignee: CSC Holdings LLC (Altice USA, Inc.)
• Original Assignee: CSC Holdings LLC (Altice USA, Inc.)
• Inventors: MARTELL, Lawrence Robert, Sweeney, Brian, Lariccio, Michael, Henriksen, Brett
• Granted Patent: US 9,577,824 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

Methods and systems for delivering a segmented content item from a server to a first and second device are provided. A first key is used to encrypt the segmented content item into a first plurality of encrypted segments and a second key is used to encrypt the segmented content item into a second plurality of encrypted segments. The first and second keys are different. The first plurality of encrypted segments is delivered to the first device, and the second plurality of encrypted segments is delivered to the second device.

Claims

1. A computer-based method of delivering a segmented content item from a server to a first and second device, comprising:

using a first key to encrypt the segmented content item into a first plurality of encrypted segments;

using a second key to encrypt the segmented content item into a second plurality of encrypted segments, wherein the first and second keys are different;

delivering the first plurality of encrypted segments to the first device; and

delivering the second plurality of encrypted segments to the second device.

2. The method of claim 1, wherein using a first key to encrypt the plurality of segments into a first plurality of encrypted segments comprises encrypting each of the plurality of segments using a key from a first set of keys, and using a second key to encrypt the plurality of segments into a second plurality of encrypted segments comprises encrypting each of the plurality of segments using a key from a second set of keys.

3. The method of claim 2, wherein the first set of keys is associated with a first session, the first session being associated with the first device, and the second set of keys is associated with a second session, the second session being associated with the second device.

4. The method of claim 2, wherein the first set of keys is associated with a first identifier, the first identifier being associated with the first device, and the second set of keys is associated with a second identifier, the second identifier being associated with the second device.

5. The method of claim 4, wherein an identifier is a hardware identifier associated with a device.

6. The method of claim 5, wherein the hardware identifier is a media access control (MAC) address of the device.

7. The method of claim 4, wherein an identifier is an authenticated device credential associated with a device.

8. The method of claim 7, wherein the device credentials comprise at least one of a token, a web cookie or device certificate.

9. The method of claim 4, wherein an identifier is identification information associated with a network interface to which a device is connected.

10. The method of claim 4, wherein an identifier is an interne protocol (IP) address associated with a device.

11. The method of claim 2, further comprising:

delivering the first set of keys to the first device; and

delivering the second set of keys to the second device.

12. The method of claim 1, further comprising caching the segmented content item before encryption and delivery.

13. A system of delivering a segmented content item from a server to a first and second device, comprising

an encryption engine configured to use a first key to encrypt the segmented content item into a first plurality of encrypted segments and to use a second key to encrypt the segmented content into a second plurality of encrypted segments, wherein the first and second keys are different;

and

a communication unit configured to deliver the plurality of segments encrypted using the first of key to the first device, and to deliver the plurality of segments encrypted using the second key to the second device.

14. The system of claim 13, wherein the first key is a part of a first set of keys and the first plurality of encrypted segments are generated from the first key and other keys from the first set of keys, and the second key is a part of a second set of keys and the second plurality of encrypted segments are generated from the second key and other keys from the second set of keys.

15. The system of claim 14, wherein the first set of keys is associated with a first session, the first session being associated with the first device, and the second set of keys is associated with a second session, the second session being associated with the second device.

16. The system of claim 14, wherein the first set of keys is associated with a first identifier, the first identifier being associated with the first device, and the second set of keys is associated with a second identifier, the second identifier being associated with the second device.

17. The system of claim 16, wherein the first identifier is an IP address associated with the first device and the second identifier is an IP address associated with the second device.

18. The method of claim 16, wherein an identifier is a hardware identifier associated with a device.

19. The method of claim 18, wherein the hardware identifier is a media access control (MAC) address of the device.

20. The system of claim 16, wherein an identifier is an authenticated device credential associated with a device.

21. The method of claim 20, wherein the device credentials comprise at least one of a token, a web cookie or device certificate.

22. The system of claim 16, wherein an identifier is identification information associated with a network interface to which a device is connected.

23. The system of claim 16, wherein an identifier is an internet protocol (IP) address associated with a device.

24. The system of claim 13, wherein the communication unit is further configured to deliver the first set of keys to the first device, and deliver the second set of keys to the second device.

25. The system of claim 13, further comprising:

a cache; and

a cache controller configured to store the segmented content item in the cache before encryption and delivery.

26. A computer-readable medium having computer-executable instructions stored thereon that, when executed by a computing device, cause the computing device to perform a method of delivering a segmented content item from a server to a first and second device, comprising:

using a first key to encrypt the segmented content item into a first plurality of encrypted segments;

using a second key to encrypt the segmented content item into a second plurality of encrypted segments wherein the first and second set of keys are different;

delivering the first plurality of encrypted segments to the first device; and

delivering the second plurality of encrypted segments to the second device.