Method and apparatus for installation abstraction in a secure content delivery system

• US 6,374,402 B1
• Filed: 05/12/1999
• Issued: 04/16/2002
• Est. Priority Date: 11/16/1998
• Status: Expired due to Term

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Into Networks Inc,
• Inventors: Eichin, Mark W., Schmeidler, Yonah, Atkins, Derek, Rostcheck, David J.
• Primary Examiner(s): DAM, TUAN QUANG
• Application Number:
  US09/311,923
• Time in Patent Office: 1,070 Days
• Field of Search: 717/11, 707/203, 707/10, 707/9, 709/202, 709/217, 709/219-221, 709/203, 709/213, 709/229, 705/51-59, 705/80, 380/251, 380/255, 713/172, 713/191, 713/200-202, 725/25, 725/30, 725/86, 725/87, 725/91, 725/101, 725/103, 725/104, 345/749, 345/741
• US Class Current: 717/167
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 12/2801 Broadband local area networks
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/2874 Processing of data for distribution to the subscribers
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 47/2408 for supporting different services, e.g. a differentiated services [DiffServ] type of service
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/62 Establishing a time schedule for servicing the requests
• CPC Class Codes: H04N 21/23106 involving caching operations prefetching while addressing of a memory level in which the access to the desired data or data block requires associative addressing means within memory systems or architectures G06F12/0862; caching at an intermediate stage in a data network H04L67/568
• CPC Class Codes: H04N 21/2312 Data placement on disk arrays data placement in general G06F3/0604
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/2402 Monitoring of the downstream path of the transmission network, e.g. bandwidth available traffic monitoring in data switching networks H04L43/00; monitoring data switching networks utilization H04L43/0876
• CPC Class Codes: H04N 21/2408 Monitoring of the upstream path of the transmission network, e.g. client requests monitoring data switching networks utilization H04L43/0876; scheduling or organising the servicing of application requests H04L67/60
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25435 : involving characteristics of content or additional data, e.g. video resolution or the amount of advertising
• CPC Class Codes: H04N 21/26216 : involving the channel capacity, e.g. network bandwidth admission control, resource allocation in open networks H04L12/5692; flow control in packet networks H04L47/10; establishing a schedule or organising the servicing of application requests taking into account QoS H04L67/61
• CPC Class Codes: H04N 21/4331 : Caching operations, e.g. of an advertisement for later insertion during playback
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/47202 : for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/8186 : specially adapted to be executed by a peripheral of the client device, e.g. by a reprogrammable remote control
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/17318 : Direct or substantially direct transmission and handling of requests

Abstract

A system for secure delivery of on-demand content over broadband access networks includes a client application executing on a user'"'"'s local computer system. The client application interacts with a content server on which a plurality of selectable titles are stored and further interacts with an access server which provides the network address of a title and keying data necessary for to the client process access and execute the title. The client process utilizes an installation abstraction which enables a title to be executed on the local computer system without ever being installed. The abstraction is achieved by mounting a network file system and storing a set of registry entries related to the title on the local computer system. Portions of the title are retrieved from the content server and executed by the local operating system. During title execution, requests from the local operating system are intercepted and redirected to the set of registry entries, as applicable. The times at which the client process may retrieve the title data from the content server are defined by the access server through use of an activator and token.

Claims

1. A method for executing an application on a local computer system without the application being installed on the local computer system, the method comprising;

(a) accessing at a remote server information representative of a file system and set of registry entries related to the application;

(b) employing the file system information to mount a local file system;

(c) storing the set of registry entries on the local computer system;

(d) retrieving at least a portion of the application from a remote source;

by using the file system and the set of registry entries;

(e) employing the local file system to execute the retrieved portion of the application on the local computer system;

(f) processing requests from the portion of the application; and

employing step (e) for retrieving, and

(g) redirecting selected ones of the requests to the set of registry entries stored on the local computer system for retrieving a different portion of the application and for executing te different portion of the application to incrementally execute the application, whereby portions of the application are retrieved and executed upon demand.

2. The method of claim 1 further comprising:

(h) unmounting the local file system upon termination of the application execution.

3. The method of claim 2, further comprising removing the stored set of registry entries from the local computer system.

4. The method of claim 1 further conprising:

processing the file system information to identify a write through attribute representative of a data file to be created on the local computer system for storing information after execution of the application.

5. The method of claim 1 further comprising

processing the information accessed from the remote server to generate the file system, registry entries and tihe portion of the application program.

6. The method of claim 1, further comprising

providing a device driver for collecting requests from the executing retrieved portion of the application.

7. The method of claim 1, wherein accessing information and a remote server includes accessing the remote server to retrieve a different portion of the application wherein the different portion of the application is selected according to the state of the portion of the executing on the local computer.

8. A computer program product for use with a computer system capable of executing an application under the control of an operating system on the computer system, the computer program product comprising a computer usable medium having program code stored thereon comprising:

(a) program code for accessing at a remote server information representative of a file system and set of registry entries related to the application;

(b) program code for employing the file system information to mount a local file system and storing the set of registry entries locally on the computer system;

(c) program code fbr employing the local file system to execute a portion of an application retrieved from a remote source;

(d) program code for processing requests from the executing application during the application execution; and

(e) program code for redirecting selected ones of the requests to the set of registry entries for retrieving a different portion of the application and for executing the different portion of the application to incrementally execute the application, whereby portions of the application are retrieved and executed upon demand.

9. The computer program product of claim 8 further comprising:

(f) program code for unmounting the local file system upon termination of the application execution.

10. In a computer system having a processor and a memory and an operating system capable of executing one or more applications, an apparatus for executing an application without installing the application on the computer system, the apparatus comprising:

program logic configured to employ information representative of a file system to mount a local file system and store in the memory a plurality of registry entries related to the application;

program logic configured to execute at least a portion of the application retrieved from a remote source employing the local file system; and

program logic responsive to requests from the executing application and configured to process requests from the executing application and redirect selected ones of the requests to the plurality of registry entries for retrieving a different portion of the application and for executing the different portion of the application to incrementally execute the application, whereby portions of the application are retrieved and executed upon demand.

11. The apparatus of claim 10 further comprising:

program logic configured to unmount the local file system upon termination of the application execution.

12. The apparatus of claims 11, further comprising removing the stored set of registry entries from the local computer system.

13. A computer data signal embodied in a carrier wave and including a program for causing a computer system to execute an application under the control of an operating system on the computer system, said program comprising:

(a) program code means for receiving information representative of a file system and a set of registry enties related to an application from a remote server;

(b) program code means for employing the file system information to mount a local file system and storing the set of registry entries locally on the computer system;

(c) program code means for employing the local file system to execute at least the portion of the application retrieved from a remote source;

(d) program code means for processing requests from the application executing on the computer system; and

(e) program code means for redirecting selected ones of the requests to the set of registry entries for retrieving a different portion of the application and for executing the different portion of the application to incrementally execute the application, whereby portions of the application are retrieved and executed upon demand.

14. The computer data signal of claim 13 further comprising:

(f) program code means for undounting the local file system upon termination of the application execution.

15. In a client process executing on a local computer system operatively coupled over a computer network to an access server and one or more sources of title data, a method for enabling on-demand delivery of a title comprising:

(a) obtaining from the access server a token and a network address of a source at which the title can be accessed;

(b) transmitting the token to the source, the token defng an interval of time in which the source may be accessed;

(c) retrieving at least a portion of the title from the source, wherein the title comprises information representative of a file system and a set of registry entries;

(d) employing the file system information to mount a local file system and storing the set of registry entries on the local computer;

(e) executing the portion of the title received from the source;

(f) processing requests from the title executing on the local computer system and redirecting selected ones of the requests to the set of registry entries; and

(g) obtaining from the access server a refreshed token for continuing steps (c) and (e) as-needed.

16. The method of claim 15 wherein step (e) further comprising:

(h) unmounting the local file system upon termination of the title execution.

17. A computer program product for use with a computer system operatively coupled over a computer network to an access server and one or more sources of title data, the computer program product comprising a computer usable medium having program code stored thereon comprising:

(a) program code for obtaining from the access server a token and a network address of a source at which the title can be accessed;

(b) program code for transnitting the token to the source, the token defining an interval of time in which the source may be accessed;

(c) program code for retrieving at least a portion of the title from the source, wherein the title comprises information representative of a file system and a set of registry entries;

(d) program code for employing the file system information to mount a local file system and storing the set of registry entries on the local computer,

(e) program code for executing the portion of the title received from the source;

(f) program code for processing requests from the executing title on the computer system and for redirecting selected ones of the requests to the set of registry entries; and

(g) progran code for obtaining from the access server a refreshed token for continuing steps (c) and (e) as-needed.

18. The computer program product of claim 17 wherein the program code for executing the portion of the title comprises:

(h) program code for unmounting the local file system upon termination of the title execution.

19. In a computer system operatively coupled over a computer network to an access server and one or more sources of title data, an apparatus for enabling on-demand delivery of a title comprising:

(a) program logic configured to obtain from the access server a token and a network address of a source at which an identified title can be accessed;

(b) program logic configured to transmit the token to the source, the token defining an interval of time in which the source may be accessed;

(c) program logic configured to retrieve at least a portion of the title from the source, wherein the title comprises information representative of a file system and a set of registry entries;

(d) program logic configured to mount a local file system and storing the set of registry entries on the local computer;

(e) program logic configured to execute the portion of the title received from the source;

(f) program logic configured to process requests from the title executing on the local computer system and redirecting selected ones of the requests to the set of registry entries; and

(g) progr logic configured to obtain from the access server a refreshed token for continuing steps (c) and (e) as-needed.

20. The apparatus of claim 19 wherein the program logic configured to execute the portion of the title comprises:

(h) program logic configured to unmount the local file system upon termination of the title execution.

21. A computer data signal embodied in a carrier wave, wherein the computer data signal is computer signal is computer readable program code means for operating a computer system coupled over a computer network to an access server and one or more sources of title data, and enabling on-demand delivery of a title, said program comprising:

(a) program code means for obtaining from an access server a token and a network address of a source at which an identified title can be accessed;

(b) program code means for transmitting the token to the source, the token containing data defining an interval of time in which the soue may be accessed;

(c) program code means for retrieving at least a portion of the title from the source, wherein the title comprises information representative of a file system and a set of registry entries;

(d) program code means for mounting a local file system employing the file system information and storing the set of registry entries on the computer system;

(e) program code means for executing the portion of the title received from the source;

(f) program code means for processing requests from the executing title on the computer system and for redirecting selected ones of the request to the set of registry entries; and

(g) program code means for obtaining from the access server a refreshed token for continuing steps (c) and (e) as-needed.

22. The computer data signal of claim 21 wherein the program code means for executing the portion of the title comprises:

(b) program code means for unmounting the local file system upon termination of the title execution.

23. A method fbr enabling on demand delivery and execution of a title on a client computer, the client computer including an operating system and being operatively coupled over a computer network to an access server and one or more sources of title data, comprising:

obtaining from the access server an activator for the title,

retrieving at least a portion of a file package from a source of title data, the file package containing title identification data and unexecutable data files for the title, die retrieved portion of the file package including the title identification data,

identifying the operating requirements of the title from the title identification data,

retrieving selected unexecutable data files for the title based on the identified operating requirements and the operating system of the client computer, and

processing the retrieved data files into executable form using the activator.

24. The method of claim 23, wherein the title identification data comprises at least one of the system requirements of the title, the names of the unexecutable data files contained in the file package, registry information, and a map of the file package.

25. The method of claim 23, further comprising

obtaining from the access server a token corresponding to the title, the token containing data defining an initial interval of time in which the source may be accessed by the client computer.

26. The method of claim 23, further comprising

requesting from the access server a refreshed token containing data defining a second time period upon the expiration of the initial time period.

27. A computer program for use with a client computer system operatively coupled over a computer network to an access server and one or more sources of tide data, the computer program comprising a computer readable medium having instructions thereon for causing the processor of the client computer system to:

obtain from the access server an activator for the title,

retrieve at least a portion of a file package from a source of title data, the file package containing title identification data and unexecutable data files for the title, the retrieved portion of the file package including the title identification data,

identify the operating requirements of the title from the title identification data contained in the file package,

retrieve selected unexecutable data files for the title based on identified operating requirements of the client computer system, and

process the retrieved data files into executable form using the activator.

28. The computer program of claim 27, wherein the title identification data comprises at least one of the system requirements of the title, the names of the unexecutable data files contained in the file package, registry information, and a map of the file package.

29. The computer program of claim 27, further comprising instructions to

obtain from the access server a token corresponding to the title, the token containing data defining an initial interval of time in which the source may be accessed by the client computer.

30. The computer program of claim 29, fiither comprising instructions to request from the access server a refreshed token containing data defining a second time period upon the expiration of the initial time period.