METHOD AND SYSTEM FOR PROVIDING A PRIVATE NETWORK

• US 20150319179A1
• Filed: 05/05/2015
• Published: 11/05/2015
• Est. Priority Date: 05/05/2014
• Status: Abandoned Application

• Current Assignee: Advanced Digital Broadcast SA (Advanced Digital Broadcast Holdings SA)
• Original Assignee: Advanced Digital Broadcast SA (Advanced Digital Broadcast Holdings SA)
• Inventors: MIASOJED, Sebastian, PAJAK, Michal
• Application Number:
  US14/703,915
• Publication Number:
  US 20150319179A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/30 Profiles

Abstract

A system for providing a private network to a user terminal (110), the system comprising: the user terminal (110) configured to request content from secure sources (120, 130) compliant with secure content certificates (111) and from a proxy server (150); wherein the proxy server (150) is configured to: communicate with the user terminal (110) via a secure channel; receive from the user terminal (110) a request to access content from an external content server (160); retrieve the requested content from the external content server (160); verify the compliance of the requested content with predefined content compliance rules (151); and provide the requested content to the user terminal (110) if the content is compliant with the predefined content compliance rules (151). The user terminal (110) further comprises content access rules defining the types of content which can be accessed directly without the use of the proxy server (150).

Claims

1. A system for providing a private network to a user terminal (110), the system comprising:

the user terminal (110) configured to request content from secure sources (120, 130) compliant with secure content certificates (111) and from a proxy server (150);

wherein the proxy server (150) is configured to;

communicate with the user terminal (110) via a secure channel;

receive from the user terminal (110) a request to access content from an external content server (160);

retrieve the requested content from the external content server (160);

verify the compliance of the requested content with predefined content compliance rules (151); and

provide the requested content to the user terminal (110) if the content is compliant with the predefined content compliance rules (151);

characterized in that

the user terminal (110) further comprises content type access rules (112) defining the types of content which can be accessed directly without the use of the proxy server (150).

2. The system according to claim 1, wherein at least some of the compliance rules (151) are user-terminal (110) specific or user-specific.

3. The system according to claim 1, further comprising an internal secured content server (120) which is accessible by the user terminal via a secure channel and which is configured to provide a list of services (121) to the user terminal (110).

4. The system according to claim 1, wherein the user terminal (110) comprises secure content certificates for accessing external allowed content servers (140) directly without the use of the proxy server (150).

5. A method for providing a private network to a user terminal (110), comprising the steps of:

configuring the user terminal (110) to request content from secure sources (120, 130) compliant with secure content certificates (111) and a from proxy server (150);

providing a secure channel for communication between the user terminal (110) and the proxy server (150);

at the proxy server (150);

receiving from the user terminal (110) a request to access content at an external content server (160);

retrieving the requested content from the external content server (160);

verifying the compliance of the requested content with predefined content compliance rules (151); and

providing the requested content to the user terminal (110) if the content is compliant with the predefined content compliance rules (151);

characterized in that;

the user terminal (110) further comprises content type access rules (112) defining the types of content which can be accessed directly without the use of the proxy server (150);

and the method further comprises configuring the user terminal (110) to request the content of the types defined by the content type access rules (112) directly (209) without the use of the proxy server (150).

6. The method according to claim 5, wherein at least some of the compliance rules (151) are user-terminal (110) specific or user-specific.

7. The method according to claim 5. further comprising providing an internal secured content server (120) which is accessible by the user terminal via a secure channel and which is configured to provide a list of services (121) to the user terminal (110).

8. The method according to claim 5, wherein the user terminal (110) comprises secure content certificates for accessing external allowed content servers (140) directly without the use of the proxy server (150).

9. A computer program comprising program code means for performing all the steps of the method according to claim 5 when said program is run on a computer.

10. A computer readable medium storing computer-executable instructions performing all the steps of the method according to claim 5 when executed on a computer.

11. The method according to claim 6, further comprising providing an internal secured content server (120) which is accessible by the user terminal via a secure channel and which is configured to provide a list of services (121) to the user terminal (110).

12. The method according to claim 6, wherein the user terminal (110) comprises secure content certificates for accessing external allowed content servers (140) directly without the use of the proxy server (150).

13. The method according to claim 7, wherein the user terminal (110) comprises secure content certificates for accessing external allowed content servers (140) directly without the use of the proxy server (150).