Peer-to-peer networks with protections

• US 7,987,368 B2
• Filed: 05/05/2006
• Issued: 07/26/2011
• Est. Priority Date: 10/28/2005
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Wang, Xiaoming, Zhu, Bin, Li, Shipeng
• Primary Examiner(s): Orgad; Edan
• Assistant Examiner(s): HOLDER, BRADLEY W
• Application Number:
  US11/381,951
• Publication Number:
  US 20070113096A1
• Time in Patent Office: 1,908 Days
• Field of Search: 713/175, 713/156, 713/173, 713/176
• US Class Current: 713/175
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

In a peer-to-peer environment, copyrights and users'"'"' privacies can be protected by a tracking mechanism. In described implementations, tracking mechanisms can use certificates that are produced using random numbers to protect the privacy of users and/or certificates that are produced responsive to at least one hardware identifier to enable uploader to be identified to protect copyrights.

Claims

1. A device, comprising:

at least one processor; and

one or more storage media including processor-executable instructions that are capable of being executed by the at least one processor, wherein the processor-executable instructions, when executed, direct the device to perform actions comprising;

generating a first random number;

creating a first tracking hash value based on an object and the first random number;

producing a peer certification value responsive to the first tracking hash value;

formulating a peer-signed certificate using the peer certification value;

detecting if an ascertained individualized certificate has been revoked with reference to a revocation list that is made available at a central server and is distributed to a plurality of peers, the revocation list containing a list of revoked certificates;

updating a revocation list stored locally on a peer if a threshold of a maximum non-updating period is reached, the threshold of a maximum non-updating period corresponding to a predetermined period of time in which the revocation list is to be updated;

building a tracking information set that includes the peer-signed certificate, the peer certification value, an encrypted tracking value, the first random number, and a second random number;

formulating an atomic unit by combining the object with the tracking information set by inserting the tracking information set into a tracking attribute field of the object;

attempting to upload the atomic unit to a peer-to-peer network;

when the atomic unit is uploaded to the peer-to-peer network, joining the atomic unit to persistent metadata that contains an uploader-signed certificate that is used to track an uploader of the atomic unit;

authenticating and validating the uploader-signed certificate when the atomic unit is first uploaded to the peer-to-peer network and when the atomic unit is replicated from a first peer to a second peer;

entitling the uploader of the atomic unit to upload additional atomic units to the peer-to-peer network and to remain anonymous until illicit material uploaded by the uploader is discovered; and

upon discovery of the illicit material, identifying the uploader and removing the illicit material from the peer-to-peer network.

2. The device as recited in claim 1, wherein the peer-signed certificate includes a certificate signed by an authority to validate the peer-signed certificate.

3. The device as recited in claim 1, wherein:

the action of creating a first tracking hash value comprises an action of creating the first tracking hash value using a first secret peer key.

4. The device as recited in claim 1, wherein the processor-executable instructions, when executed, direct the device to perform further actions comprising:

generating the second random number; and

creating a second tracking hash value based on the second random number;

wherein the action of formulating an atomic unit comprises an action of formulating the atomic unit by combining the object with the second random number.

5. The device as recited in claim 4, wherein:

the action of creating the second tracking hash value comprises an action of creating the second tracking hash value based on a second secret peer key.

6. The device as recited in claim 1, wherein the processor-executable instructions, when executed, direct the device to perform further actions comprising:

creating a second tracking hash value based on the second random number; and

producing, using the second tracking hash value, an encrypted tracking value responsive to a peer public key and an individualized certification received from an authority and based on at least one hardware component of the device;

wherein the action of formulating an atomic unit comprises an action of formulating the atomic unit by combining the object with the encrypted tracking value.

7. The device as recited in claim 1, wherein:

the processor-executable instructions, when executed, direct the device to perform further actions comprising;

creating a second tracking hash value based on the second random number; and

producing, using the second tracking hash value, the encrypted tracking value responsive to a peer public key and the individualized certificate received from an authority and based on at least one hardware component of the device.

8. The device as recited in claim 7, wherein the processor-executable instructions, when executed, direct the device to perform further actions comprising:

creating another second tracking hash value based on the second random number as extracted from the tracking information set of the atomic unit;

ascertaining the individualized certification value and the peer public key by decrypting the encrypted tracking value, as extracted from the tracking information set of the atomic unit, using the other second tracking hash value;

if the ascertained individualized certificate is detected to have been revoked, blocking uploading of the atomic unit;

verifying if the ascertained individualized certification value and the ascertained peer public key are authentic using a public key of the authority; and

blocking uploading, downloading, or replication of the atomic unit if verification fails.

9. The device as recited in claim 7, wherein the processor-executable instructions, when executed, direct the device to perform further actions comprising:

ascertaining the first tracking hash value by decrypting the peer certification value, as extracted from the tracking information set of the atomic unit, using the peer public key;

creating another first tracking hash value based on the object and the first random number, as extracted from the tracking information set of the atomic unit;

verifying if the object has integrity by comparing the ascertained first tracking hash value to the created other first tracking hash value; and

if the object is verified to have integrity, permitting the atomic unit to be uploaded to the peer-to-peer network.

10. A method, comprising:

receiving a peer hardware identifier from a peer at an authority, the peer hardware identifier based on at least one hardware component of the peer;

determining a modified peer hardware identifier from the peer hardware identifier;

producing an individualized certification value responsive to the modified peer hardware identifier;

formulating an authority-signed certificate using the individualized certification value, the authority-signed certificate being used by the peer to access a peer-to-peer network;

maintaining a revocation list at the authority, the revocation list including multiple respective modified peer hardware identifiers corresponding to multiple respective devices that are to be denied access to a peer-to-peer network;

distributing the revocation list to a number of devices that are permitted access to the peer-to-peer network;

requiring each device receiving the revocation list to update a locally stored revocation list when a threshold of a maximum non-updating period is reached, the threshold of a maximum non-updating period corresponding to a predetermined period of time in which the locally stored revocation list is to be updated;

in response to the peer uploading an atomic unit to the peer-to-peer network, joining the atomic unit to persistent metadata and associating a peer-signed certificate with the atomic unit that is used to track the peer, the atomic unit being created by combining an object with a tracking information set that includes the individualized certification value, the authority-signed certificate, an encrypted tracking value, a first random number, and a second random number, the tracking information set being inserted into a tracking attribute field of the object;

authenticating and validating the peer-signed certificate when the atomic unit is first uploaded to the peer-to-peer network and when the atomic unit is replicated from a first peer to a second peer;

entitling the peer to upload additional atomic units to the peer-to-peer network and to remain anonymous until either the atomic unit or the additional atomic units are determined to be illicit; and

upon discovery of illicit content, identifying the peer utilizing the peer-signed certificate and removing uploaded content associated with the peer from the peer-to-peer network.

11. The method as recited in claim 10, wherein:

the receiving comprises receiving a peer public key from the peer at the authority; and

the producing comprises producing the individualized certification value responsive to the peer public key.

12. The method as recited in claim 10, wherein:

the receiving comprises receiving at the authority identifying personal information associated with a user of the peer; and

the producing comprises producing the individualized certification value responsive to the identifying personal information associated with the user.

13. The method as recited in claim 10, further comprising:

checking if the modified peer hardware identifier is on the revocation list; and

sending a rejection notification to the peer denying the peer the authority-signed certificate when the modified peer hardware identifier is on the revocation list.

14. One or more processor-accessible storage device comprising processor-executable instructions that include;

a peer-to-peer application that uses a first certificate signed by an authority to evidence uploading rights for a peer-to-peer network and a second certificate signed by a peer on which the peer-to-peer application is to execute, the first certificate including an individualized certification value that is based, at least in part, on an identifier of at least one hardware component of the peer; and

a signing and verifying module that verifies an authenticity and integrity of an object when the peer either downloads or replicates an object from another peer, the signing and verifying module further to;

create an atomic unit to be uploaded to the peer-to-peer network, the atomic unit being created by combining the object with a tracking information set that includes the first certificate, the second certificate, a peer certification value, an encrypted tracking value, a first random number, and a second random number;

return a failure and reject the download or replication of the atomic unit when the verification is unsuccessful;

instructing the peer to perform an independent verification of authenticity and integrity for the atomic unit and remove the atomic unit from storage when the verification is unsuccessful;

joining the atomic unit to persistent metadata that contains an uploader-signed certificate when the atomic unit is uploaded by the another peer to the peer-to-peer network, the uploader-signed certificate being used to track the another peer;

entitling the another peer to upload one or more additional atomic units to the peer-to-peer network and to remain anonymous until the atomic unit or the one or more additional atomic units uploaded by the another peer are determined to be illicit; and

upon discovering an illicit object, identifying the another peer utilizing the uploader-signed certificate and removing objects uploaded by the another peer from the peer-to-peer network; and

a revocation list that contains a list of revoked certificates and that is maintained at a central server and is distributed to each peer, each peer being required to update its locally stored revocation list when a threshold of a maximum non-updating period is reached, the threshold of a maximum non-updating period corresponding to a predetermined period of time in which the locally stored revocation list is to be updated.

15. The one or more processor-accessible storage device as recited in claim 14, wherein the second certificate evidences authenticity and integrity for a particular object that is to be uploaded to the peer-to-peer network;

and wherein the second certificate includes a peer certification value that is produced responsive to the object.

16. The one or more processor-accessible storage device as recited in claim 14, wherein the peer-to-peer application comprises an individualization module that interacts with the authority to receive the first certificate by sending a peer hardware identifier and a peer public key to a access control server when the peer-to-peer application is initially installed on the peer.