Methods and apparatus for providing data distribution that supports auditing

• US 7,761,501 B1
• Filed: 10/24/2002
• Issued: 07/20/2010
• Est. Priority Date: 10/24/2002
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: O'Toole, James W. Jr.
• Primary Examiner(s): DINH, KHANH Q
• Application Number:
  US10/279,437
• Time in Patent Office: 2,826 Days
• Field of Search: 709/223, 709/224, 709/238, 709/203, 707/9, 707/10, 713/201, 713/168, 715/513, 380/247
• US Class Current: 709/203
• CPC Class Codes: H04N 21/23439 for generating different versions
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/83555 using a structured language for describing usage rules of the content, e.g. REL

Abstract

The invention is directed to techniques for providing data distribution that supports auditing. Accordingly, a data communications device receives data from a data provider, the data containing label information. The data communications device filters the data based on the label information contained in the data. Next, the data communications device associates token information with the data whereby the token information enables later audits of transmission of the data traveling through the data communications device. Finally, the data communications device transmits the data and the token information toward a data receiver. Filtering of the data results in certain data being removed and/or directed to a specific data receiver based on labels within the data. The data communications device also inserts a signature into the token in order to identify the data communications device transmitting the data in a manner that cannot be forged.

Claims

1. In a data communications device, a method for providing data distribution that supports auditing, the method comprising the steps of:

receiving data from a data provider, the data containing label information;

filtering the data based on the label information contained in the data, wherein filtering comprises;

retrieving a set of filter criteria associated with the data communications device;

detecting a label of the set of filter criteria within the label information contained in the data; and

performing a filter operation on a data;

associating token information with the data, the token information enabling auditing capability of transmission of the data through the data communications device; and

transmitting the data and the token information toward a data receiver, wherein the performed filter operation causes the data to be transmitted toward a data receiver defined for the label in the set of filter criteria.

2. The method of claim 1 wherein the step of filtering further comprises the steps of:

retrieving a set of filter criteria associated with the data communications device;

detecting a label of the set of filter criteria within the label information contained in the data; and

performing a filter operation on a data element associated with the label to modify the data.

3. The method of claim 2 wherein the step of performing a filter operation comprises the steps of:

removing, from the data, a data element defined by the detected label.

4. The method of claim 1 wherein step of associating further comprises the steps of:

in response to receiving data from the data provider, creating a token of the token information, the token associated with a data element in the data;

obtaining a data descriptor from label information for the data element within the data, the data descriptor describing content of the data element; and

associating the data descriptor with the token in a data distribution log of the data communications device.

5. The method of claim 4 wherein the data descriptor is a financial descriptor identifying a contractual metric that relates a charge to be determined for the token associated with the data descriptor.

6. The method of claim 4 wherein the step of creating the token further comprises the steps of:

generating an identifier for the token, the identifier including at least one of;

i) a random identifier;

ii) an identity of the data communications device; and

iii) an identity of the data element to which the token will be associated; and

assigning the identifier to the token.

7. The method of claim 4 further comprising the step of:

inserting the token into the data element at a location defined by a token insertion label.

8. The method of claim 1 wherein the data includes a plurality of data elements, each delineated in the data with label information, and wherein the method comprises the steps of:

repeating the steps of creating a token of the token information, obtaining the data descriptor, associating the data descriptor with the token in a data distribution log of the data communications device and inserting the token into the data element, for each data element in the data that includes a token insertion label, such that each data element containing the token insertion label identifies the token within the data element.

9. The method of claim 1 wherein the data is received and transmitted in the steps of receiving and transmitting using a predefined packet size, and wherein the steps of filtering and associating do not change the size of the data and wherein the step of transmitting comprises the step of recalculating connection information including a check sum.

10. The method of claim 9 wherein the data includes token insertion filler information and wherein step of inserting the token into the data element replaces a portion of token insertion filler information with token information such that the total predetermined size of the combination of the token and token insertion filler information remains constant.

11. The method of claim 1 wherein the steps of filtering and associating modifies the data to be a different size than the data received in the step of receiving and wherein the step of transmitting comprises the step of adjusting connection information associated with transmission of a data to account for changes in size of the data.

12. The method of claim 1 wherein the step of transmitting the data further comprises the steps of:

creating a signature for the data communications device;

associating the signature for the data communications device with the token information, the signature for the data communications device providing a means for token validation; and

forwarding the signature for the data communications device with the data and token information.

13. The method of claim 1 wherein label information is arranged in a hierarchical manner having a number of different label levels and wherein step of filtering data comprises the step of filtering the data based on label information contained in the data at a predetermined number of label levels in hierarchy of labeling information.

29. The method of claim 4 comprising:

tracking the data received by the data receiver through use of the token information associated with the data; and

comparing the token in the data distribution log of the data communications device with the token information of the tracked data to audit the data provider.

14. A data communications device for providing data distribution that supports auditing, the data communications device comprising:

a communications interface;

a memory;

a processor; and

an interconnection mechanism coupling the communications interface, the memory and the processor;

wherein the memory is configured with a data distribution application, that when executed on the processor supports auditing by performing the steps of;

receiving data from a data provider, the data containing label information;

filtering the data based on the label information contained in the data, wherein filtering comprises;

retrieving a set of filter criteria associated with the data communications device;

detecting a label of the set of filter criteria within the label information contained in the data; and

performing a filter operation on a data;

associating token information with the data, the token information enabling auditing capability of transmission of the data through the data communications device; and

transmitting the data and the token information toward a data receiver, wherein the performed filter operation causes the data to be transmitted toward a data receiver defined for the label in the set of filter criteria.

15. The data communications device of claim 14 wherein, when the data communications device performs the step of filtering, the data communications device performs the operations of:

retrieving a set of filter criteria associated with the data communications device;

detecting a label of the set of filter criteria within the label information contained in the data; and

performing a filter operation on a data element associated with the label to modify the data.

16. The data communications device of claim 15 wherein the filter operation comprises the steps of removing, from the data, a data element defined by the detected label.

17. The data communications device of claim 14 wherein, when the data communications device performs the step of associating, the data communications device performs the operations of:

in response to receiving data from the data provider, creating a token of the token information, the token associated with a data element in the data;

obtaining a data descriptor from label information for the data element within the data, the data descriptor describing content of the data element; and

associating the data descriptor with the token in a data distribution log of the data communications device.

18. The data communications device of claim 17 wherein the data descriptor is a financial descriptor identifying a contractual metric that relates a charge to be determined for the token associated with the data descriptor.

19. The data communications device of claim 17 wherein, when the data communications device performs the step of creating the token, the data communications device performs the operations of:

generating an identifier for the token, the identifier including at least one of;

i) a random identifier;

ii) an identity of the data communications device; and

iii) an identity of the data element to which the token will be associated; and

assigning the identifier to the token.

20. The data communications device of claim 17, wherein the data communications device further performs the operation of:

inserting the token into the data element at a location defined by a token insertion label.

21. The data communications device of claim 14, wherein the data includes a plurality of data elements, each delineated in the data with label information, and wherein the data communications device performs the operations of:

repeating the steps of creating a token of the token information, obtaining the data descriptor, associating the data descriptor with the token in a data distribution log of the data communications device and inserting the token into the data element, for each data element in the data that includes a token insertion label, such that each data element containing the token insertion label identifies the token within the data element.

22. The data communications device of claim 14 wherein the data is received and transmitted in the steps of receiving and transmitting using a predefined packet size, and wherein the steps of filtering and associating do not change the size of the data and wherein, when the data communications device performs the step of transmitting the data communications device performs the operations of recalculating connection information including a check sum.

23. The data communications device of claim 14 wherein the steps of filtering and associating modifies the data to be a different size than the data received in the step of receiving and wherein, when the data communications device performs the step of transmitting the data communications device performs the operation of adjusting connection information associated with transmission of a data to account for changes in size of the data.

24. The data communications device of claim 20 wherein the data includes token insertion filler information and wherein when the data communications device performs the step of inserting the token into the data element, the data communications device replaces a portion of token insertion filler information with token information such that the total predetermined size of the combination of the token and token insertion filler information remains constant.

25. The data communications device of claim 14 wherein, when the data communications device performs the step of transmitting the data, the data communications device performs the operation of:

creating a signature for the data communications device;

associating the signature for the data communications device with the token information, the signature for the data communications device providing a means for token validation; and

forwarding the signature for the data communications device with the data and token information.

26. The data communications device of claim 14 wherein label information is arranged in a hierarchical manner having a number of different label levels and wherein, when the data communications device performs the step of filtering data, the data communications device performs the operation of filtering the data based on label information contained in the data at a predetermined number of label levels in hierarchy of labeling information.

30. The data communications device of claim 17 wherein the data communications device performs the operations of:

tracking the data received by the data receiver through use of the token information associated with the data; and

comparing the token in the data distribution log of the data communications device with the token information of the tracked data to audit the data provider.

27. A data communications device, for providing data distribution that supports auditing, comprising:

a memory;

a communications interface;

a processor;

an interconnection mechanism coupling the memory, the processor and the communications interface;

means, coupled to the communications interface, for receiving data from a data provider, the data containing label information;

means, coupled to the processor, for filtering the data based on the label information contained in the data, wherein means for filtering comprises;

means for retrieving a set of filter criteria associated with the data communications device;

means for detecting a label of the set of filter criteria within the label information contained in the data; and

means for performing a filter operation on a data;

means, coupled to the processor, for associating token information with the data, the token information enabling auditing capability of transmission of the data through the data communications device; and

means, coupled to the communications interface, for transmitting the data and the token information toward a data receiver, wherein the performed filter operation causes the data to be transmitted toward a data receiver defined for the label in the set of filter criteria.

31. The data communications device of claim 27 comprising:

in response to receiving data from the data provider, means, coupled to the processor, for creating a token of the token information, the token associated with a data element in the data;

means, coupled to the processor, for obtaining a data descriptor from label information for the data element within the data, the data descriptor describing content of the data element;

means, coupled to the processor, for associating the data descriptor with the token in a data distribution log of the data communications device;

means, coupled to the communication interface, for tracking the data received by the data receiver through use of the token information associated with the data; and

means, coupled to the processor, for comparing the token in the data distribution log of the data communications device with the token information of the tracked data to audit the data provider.

28. A computer program product that includes a computer readable storage medium having instructions stored thereon for providing information suitable for providing data distribution that supports auditing, the method comprising the steps of:

receiving data from a data provider, the data containing label information;

filtering the data based on the label information contained in the data, wherein filtering comprises;

retrieving a set of filter criteria associated with the data communications device;

detecting a label of the set of filter criteria within the label information contained in the data; and

performing a filter operation on a data;

associating token information with the data, the token information enabling auditing capability of transmission of the data through the data communications device; and

transmitting the data and the token information toward a data receiver, wherein the performed filter operation causes the data to be transmitted toward a data receiver defined for the label in the set of filter criteria.

32. The computer program product of claim 28 comprising:

in response to receiving data from the data provider, creating a token of the token information, the token associated with a data element in the data;

obtaining a data descriptor from label information for the data element within the data, the data descriptor describing content of the data element;

associating the data descriptor with the token in a data distribution log of the data communications device;

tracking the data received by the data receiver through use of the token information associated with the data; and

comparing the token in the data distribution log of the data communications device with the token information of the tracked data to audit the data provider.