Managed file backup and restore at remote storage locations through multi-services gateway at user premises

• US 8,180,735 B2
• Filed: 09/07/2007
• Issued: 05/15/2012
• Est. Priority Date: 12/29/2006
• Status: Active Grant

• Current Assignee: Prodea Automation LLC (f/k/a Kip Prod P1) (FIG LLC (d/b/a Fortress Investment Group LLC))
• Original Assignee: Prodea Systems, Inc.
• Inventors: Ansari, Amir, Cowgill, George A., Nicholls, Leon E., Raissyan, Atousa, Ramayya, Jude P., Masina, Ramprakash, McQuarters, Alvin R.
• Primary Examiner(s): Wong, Leslie
• Application Number:
  US12/521,756
• Publication Number:
  US 20100205152A1
• Time in Patent Office: 1,712 Days
• Field of Search: 707/640, 707/654, 707/999.204, 709/218, 709/219, 380/54, 380/255, 726/12
• US Class Current: 707/640
• CPC Class Codes: G05B 15/02 electric
• CPC Class Codes: G05B 19/042 using digital processors G05B19/05 takes precedence
• CPC Class Codes: G05B 2219/2642 Domotique, domestic, home control, automation, smart house
• CPC Class Codes: G06F 16/64 Browsing; Visualisation therefor generation of a list or set of audio data G06F16/638
• CPC Class Codes: G06F 16/68 Retrieval characterised by using metadata, e.g. metadata not derived from the content or metadata generated manually
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G08B 13/19656 Network used to communicate with a camera, e.g. WAN, LAN, Internet
• CPC Class Codes: G10L 15/22 Procedures used during a speech recognition process, e.g. man-machine dialogue
• CPC Class Codes: G10L 2015/223 Execution procedure of a spoken command
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 12/2807 Exchanging configuration information on appliance services in a home automation network arrangements for maintenance or administration involving network analysis for automatically determining the actual topology of a network H04L41/12; hardware or software tools for network management using graphical user interfaces H04L41/22; address allocation H04L61/50
• CPC Class Codes: H04L 12/2812 describing content present in a home automation network, e.g. audio video content retrieval from the Internet G06F16/95
• CPC Class Codes: H04L 12/2814 Exchanging control software or macros for controlling appliance services in a home automation network arrangements for maintenance or administration involving configuration of the network and network elements H04L41/08
• CPC Class Codes: H04L 12/2816 Controlling appliance services of a home automation network by calling their functionalities arrangements in telecontrol or telemetry systems for selectively calling a substation from a main station; in which substation desired apparatus is selected for applying a control signal thereto or for obtaining measured values therefrom H04Q9/00
• CPC Class Codes: H04L 12/2818 from a device located outside both the home and the home network access arrangements H04L12/2856; for remote control or remote monitoring of applications H04L67/025; arrangements for transmitting signals characterised by the use of a wireless eletrical link G08C17/00; telephonic communication systems adapted for combination with remote control systems H04M11/007
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 2012/2849 Audio/video appliances
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 47/80 : Actions related to the user profile or the type of traffic
• CPC Class Codes: H04L 47/83 : based on usage prediction
• CPC Class Codes: H04L 49/25 : Routing or path finding in a switch fabric
• CPC Class Codes: H04L 51/04 : Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 51/046 : Interoperability with other network applications or services
• CPC Class Codes: H04L 61/4552 : Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories
• CPC Class Codes: H04L 63/02 : for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/06 : for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 : based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 65/102 : Gateways arrangements for connecting between networks having differing types of switching systems, e.g. gateways, H04L12/66
• CPC Class Codes: H04L 65/1101 : Session protocols
• CPC Class Codes: H04L 65/1108 : Web based protocols, e.g. webRTC
• CPC Class Codes: H04L 67/01 : Protocols
• CPC Class Codes: H04L 67/104 : Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/125 : involving control of end-device applications over a network
• CPC Class Codes: H04L 67/141 : Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/51 : Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/53 : using third party service providers
• CPC Class Codes: H04L 69/325 : in the network layer [OSI layer 3], e.g. X.25 H04L69/16 takes precedence
• CPC Class Codes: H04N 21/00 : Selective content distribution, e.g. interactive television or video on demand [VOD] real-time bi-directional transmission of motion video data H04N7/14 ; broadcast or conference over packet switching networks H04L12/18
• CPC Class Codes: H04N 21/40 : Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
• CPC Class Codes: H04N 7/181 : for receiving images from a plurality of remote sources
• CPC Class Codes: H04W 12/00 : Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/033 : of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/0431 : Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/065 : Continuous authentication
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 12/35 : Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: Y10S 370/911 : Bridge, e.g. brouter, bus extender

Abstract

The disclosed examples of a system for providing and managing backup and restore services of one or more endpoint devices include at least one gateway device at a user premises and a service management center. The gateway device has a first interface for enabling bi-directional communications with one or more of the endpoint devices associated with the gateway device, a second interface for enabling bi-directional communications for the one or more endpoint devices via a wide area network, and for enabling at least some bidirectional communications with at least one storage area external to the user premises via the wide area network. The gateway device also has a processor configured to manage backups and restores of data between the one or more of the endpoint devices and the at least one storage area. The service management center is external to the user premises and communicates with the gateway device via the wide area network, and controls access by the gateway device to the at least one storage area.

Claims

1. A gateway device for operation at a user premises to provide and manage services of an endpoint device associated with the gateway device, the gateway device comprising:

a first interface for enabling bi-directional network layer communications with the endpoint device associated with the gateway device, wherein the endpoint device includes data that is to be backed up;

a second interface for enabling bi-directional communications with a service management center and at least one storage area external to the premises via a wide area network;

a database containing an endpoint information table and an endpoint user table, wherein the endpoint information table contains information related to the endpoint device which includes a unique id of the endpoint device, a name of the endpoint device, a MAC address of the endpoint device, and a status of whether the endpoint device is available or unavailable, wherein the endpoint user table contains a mapping pair of the endpoint device and a user of the endpoint device such that the endpoint user table allows for multiple users including the user to be mapped to the endpoint device and allows for the user of the endpoint device to be mapped to multiple endpoint devices including the endpoint device;

an endpoint manager module configured to initiate a back-up process at the endpoint device by accessing the endpoint information table and utilizing the unique id of the endpoint device, the name of the endpoint device, the MAC address of the endpoint device, and the status of the endpoint device, wherein upon initiation by the endpoint manager module the endpoint device sends the data to be backed up to the gateway device;

a service-managed storage area configured to store the data received from the endpoint device; and

a backup manager configured to communicate via the wide area network with the service management center to determine whether the endpoint device is authorized to have the stored data backed up to the at least one storage area external to the premises, wherein upon confirmation from the service management center that the endpoint device is authorized to backup the stored data to the at least one storage area external to the premises, the backup manager sends the stored data received from the endpoint device to the at least one storage area external to the premises via the wide area network for storage therein, wherein the stored data sent to the at least one storage area is compressed and encrypted.

2. The gateway device of claim 1, wherein the data to be backed up sent from the endpoint device is at least one of encrypted and compressed when received by the gateway device.

3. The gateway device of claim 1, wherein the gateway device is further configured:

to receive the data to be backed up sent from the endpoint device that is at least one of unencrypted and uncompressed; and

to encrypt and compress the data from the endpoint device.

4. The gateway device of claim 1, wherein the gateway device is further configured to receive the data to be backed up sent from the endpoint device at a first time and send the stored data received from the endpoint device to the at least one storage area external to the premises via the wide area network for storage therein at a second, later time.

5. The gateway device of claim 1, wherein the backup manager is further configured to communicate with the service management center to receive a storage area access key in response to the endpoint device being authorized to have the stored data backed up to the at least one storage area external to the premises.

6. The gateway device of claim 5, wherein the backup manager is only allowed to send the stored data received from the endpoint device to the at least one storage area with the storage area access key.

7. The gateway device of claim 1, wherein the service-managed storage area is inaccessible by the user of the endpoint device.

8. The gateway device of claim 7, wherein the service-managed storage area is configured to receive and store at least a portion of data to be backed up from other gateway devices via the wide area network.

9. The gateway device of claim 1, wherein the gateway device is further configured to interact with a backup service provider to request a restore of the stored data on the at least one storage area to the endpoint device.

10. The gateway device of claim 9, wherein the gateway device is further configured to receive the stored data from the at least one storage area and to at least one of decrypt and decompress the stored data received from the at least one storage area, and

send the stored data received from the at least one storage area to the endpoint device in order to restore the data stored on the at least one storage area and the endpoint device.

11. The gateway device of claim 1, wherein prior to sending the stored data to the at least one storage area the backup manager module sends an availability request to the at least one storage area and in response the at least one storage area sends the backup manager an availability of space for storage within the at least one storage area, and

wherein the backup manager module sends a first amount of the stored data to the at least one storage area based on the availability of space within the at least one storage area.

12. The gateway device of claim 11, wherein the first amount of the stored data sent to the at least one storage area is less than a total amount of the stored data.

13. The gateway device of claim 11, wherein prior to sending the stored data to the at least one storage area the backup manager module sends the availability request to another at least one storage area and in response the another at least one storage area sends the backup manager an availability of space for storage within the another at least one storage area, and

wherein the backup manager module determines that the stored data represents a total amount of data that is greater than the availability of space within the at least one storage area,

wherein the first amount of the stored data that the backup manager module sends to the at least one storage area is equal to or less than the availability of space within the at least one storage area,

wherein the backup manager module sends a second amount of the stored data to the another at least one storage area, wherein the second amount represents a remaining amount of the stored data that was unable to be included in the first amount of the stored data sent to the at least one storage area, and

wherein a combination of the first and second amounts of the stored data is at least equal to the total amount of stored data.

14. The gateway device of claim 1, wherein the database further includes an endpoint data table that contains metadata information of the data to be backed up sent from the endpoint device including a pointer indentifying a location within the endpoint device for the data to be backed, and

wherein the data to be backed up sent to the gateway device is associated with the pointer such that upon a restore process request from the endpoint device the gateway device obtains the stored data on the at least one storage area and sends the stored data to the location on the endpoint device identified by the pointer.

15. The gateway device of claim 1, wherein the data to be back up includes files stored in folders on the endpoint device,

wherein the database further includes an endpoint file table that contains metadata information of files that are backed up, wherein each file is associated with a respective file id,

wherein the database further includes an endpoint folder table that contains a path for accessing the folders on the endpoint device, wherein each folder is associated with a respective folder id,

wherein the database further includes a backup endpoint file information table that contains the file ids and respective folder ids of the files selected for the backup process,

wherein the endpoint manager module and the backup manager are operable control and coordinate the backup process via accessing the endpoint file table, the endpoint folder table, and the backup endpoint file information table.

16. The gateway device of claim 1, wherein the service management center sends the gateway device a service key upon confirmation that the endpoint device is authorized to backup the data to the at least one storage area external to the premises, and

wherein the backup manager module sends the service key with the stored data to the at least one storage area such that the service key authorizes the at least one storage area to store the received stored data within the at least one storage area.

17. A method of managing backups and restores of data from an endpoint device associated with a gateway device, the gateway device in a user premises and configured to communicate with at least one storage area remote from the user premises, the method comprising:

providing the gateway device, the gateway device including;

a first interface for enabling bi-directional network layer communications with the endpoint device associated with the gateway device;

a second interface for enabling at least some bi-directional communications with a service management center and at least one storage area external to the premises via the wide area network;

a database containing an endpoint information table and an endpoint user table, wherein the endpoint information table contains information related to the endpoint device which includes a unique id of the endpoint device, a name of the endpoint device, a MAC address of the endpoint device, and a status of whether the endpoint device is available or unavailable, wherein the endpoint user table contains a mapping pair of the endpoint device and a user of the endpoint device such that the endpoint user table allows for multiple users including the user to be mapped to the endpoint device and allows for the user of the endpoint device to be mapped to multiple endpoint devices including the endpoint device;

an endpoint manager module in communication with the endpoint device and configured to initiate a back-up process at the endpoint device for the data to be backed up from the endpoint device;

a storage configured to store the data received from the endpoint device; and

a backup manager in communication with the service management center to determine whether the endpoint device is authorized to have the stored data backed up to the at least one storage area external to the premises,

initiating, by the endpoint manager module, the back-up process at the endpoint device by accessing the endpoint information table and utilizing the unique id of the endpoint device, the name of the endpoint device, the MAC address of the endpoint device, and the status of the endpoint device;

receiving data to be backed up from the endpoint device at the gateway device in response to the endpoint manager module initiating the backup process,

storing the data received from the endpoint device on the storage of the gateway device;

receiving, by the backup manager, confirmation from the service management center that the endpoint device is authorized to backup the stored data to the at least one storage area external to the premises; and

sending, by the backup manger after receiving the confirmation, the stored data received from the endpoint device to the at least one storage area external to the premises via the wide area network for storage therein, wherein the stored data sent to the at least one storage area is compressed and encrypted.

18. The method of claim 17, further comprising providing the backup manager with a storage access key, the gateway device sending the stored data to the at least one storage area with the storage access key in response to the endpoint device being authorized to have the stored data backed up to the at least one storage area external to the premises.

19. The method of claim 18, wherein providing the backup manager with the storage access key includes transmitting the storage access key from the at least one storage area to the service management center, and

transmitting the storage access key from the service management center to the backup manager.

20. The method of claim 18, wherein the gateway device receives the data to be backed up from the endpoint device at a first time, and sends the stored data to the at least one storage area at a second, later time.

21. The method of claim 17, further comprising performing, by the endpoint device, at least one of encryption and compression on the data to be backed up prior to transferring the data to be backed up to the gateway device in response to the endpoint manager module initiating the backup process.

22. The method of claim 17, further comprising performing, by the gateway device, at least one of encryption and compression on the stored data prior to sending the stored data to the at least one storage area.

23. The method of claim 17, wherein the backup manager sends the stored data to the at least one storage area at a defined time and frequency.

24. The method of claim 17, wherein the storage of the gateway device is inaccessible to the user of the endpoint device.

25. The method of claim 24, further comprising recording at the gateway device usage of the at least one storage area.

26. The method of claim 25, further comprising sending usage records from the gateway device to the service management center.

27. The method of claim 25, further comprising preparing billing information for the user at the service management center based on the usage information.

28. A gateway device for operations at a user premises to provide and manage services of an endpoint device associated with the gateway device, the gateway device comprising:

a first interface for enabling bi-directional network layer communications with the endpoint device associated with the gateway device;

a second interface for enabling at least some bi-directional communications with a service management center and at least one storage area external to the premises via a wide area network;

a database containing an endpoint information table, wherein the endpoint information table contains information related to the endpoint device which includes a unique id of the endpoint device, a name of the endpoint device, a MAC address of the endpoint device, and a status of whether the endpoint device is available or unavailable;

an endpoint manager module configured to initiate a back-up process at the endpoint device by accessing the endpoint information table and utilizing the unique id of the endpoint device, the name of the endpoint device, the MAC address of the endpoint device, and the status of the endpoint device, wherein upon initiation by the endpoint manager module the endpoint device sends the data to be backed up to the gateway device;

a storage configured to store the data received from the endpoint device; and

a backup manager configured to communicate via the wide area network with the service management center to determine whether the endpoint device is authorized to have the stored data backed up to the at least one storage area external to the premises, wherein upon confirmation from the service management center that the endpoint device is authorized to backup the stored data to the at least one storage area external to the premises, the backup manager sends the stored data received from the endpoint device to the at least one storage area external to the premises via the wide area network for storage therein, wherein the stored data sent to the at least one storage area is compressed and encrypted.

29. The gateway device of claim 28, wherein the data to be backed up sent from the endpoint device is at least one of encrypted and compressed when received by the gateway device.

30. The gateway device of claim 28, wherein the gateway device is further configured:

to receive the data to be backed up sent from the endpoint device that is at least one of unencrypted and uncompressed; and

to encrypt and compress the data to be backed up sent from the endpoint device.

31. The gateway device of claim 28, wherein the gateway device is further configured to receive the data to be backed up sent from the endpoint device at a first time and send the stored data received from the endpoint device to the at least one storage area external to the premises via the wide area network for storage therein at a second, later time.

32. The gateway device of claim 28, wherein the gateway device is further configured to receive information from the service management center configuring the backup manager to manage the backups and the restores of the stored data on the at least one storage area between the endpoint device and the at least one storage area.

33. The gateway device of claim 32, wherein the backup manager is further configured to communicate with the service management center to receive a storage area access key in response to the endpoint device being authorized to have the stored data backed up to the at least one storage area external to the premises;

and

wherein the backup manager is only allowed to send the stored data received from the endpoint device to the at least one storage area with the storage area access key.

34. The gateway device of claim 28, wherein the storage is inaccessible by a user of the endpoint device.

35. The gateway device of claim 34, wherein the storage is configured to receive and store at least a portion of data to be backed up from other gateway devices via the wide area network.

36. A system for providing and managing services of an endpoint device comprising:

a gateway device at a user premises, the gateway device comprising;

a first interface for enabling bi-directional communications with the endpoint device associated with the gateway device,

a second interface for enabling at least some bi-directional communications with at least one storage area external to the user premises via the wide area network,

a database containing an endpoint information table, wherein the endpoint information table contains information related to the endpoint device which includes a unique id of the endpoint device, a name of the endpoint device, a MAC address of the endpoint device, and a status of whether the endpoint device is available or unavailable;

an endpoint manager module configured to initiate a back-up process at the endpoint device by accessing the endpoint information table and utilizing the unique id of the endpoint device, the name of the endpoint device, the MAC address of the endpoint device, and the status of the endpoint device, wherein upon initiation by the endpoint manager module the endpoint device sends the data to be backed up to the gateway device;

a storage configured to store the data received from the endpoint device; and

a backup manager configured to communicate via the wide area network with a service management center to determine whether the endpoint device is authorized to have the stored data backed up to the at least one storage area external to the premises, wherein upon confirmation from the service management center that the endpoint device is authorized to backup the stored data to the at least one storage area external to the premises, the backup manager sends the stored data received from the endpoint device to the at least one storage area external to the premises via the wide area network for storage therein, wherein the stored data sent to the at least one storage area is compressed and encrypted; and

the service management center in communication with the gateway device via the wide area network, the service management center controlling access by the gateway device to the at least one storage area.

37. The system of claim 36, further comprising an access key to the at least one storage area that must be received at the at least one storage area from the gateway device to cause the at least one storage area to store the stored data sent from the gateway device.

38. The system of claim 37, wherein the service management center is configured to receive and maintain the access key from the at least one storage area and to selectively provide the access key to the gateway device.

39. The system of claim 38, wherein the service management center is configured to authenticate whether the gateway device requesting a backup or restore is permitted to use a particular path for the backup or restore.

40. The system of claim 38, wherein the storage is inaccessible by a user of the endpoint device.

41. The system of claim 40, wherein the service management center is configured to manage the storage of the gateway device.

42. The system of claim 41, wherein the service management center is configured to communicate with the gateway device and cause the stored data to be partitioned into separate portions and cause the backup manager to distribute the separate portions to the another gateway device to be stored on a storage of the another gateway device.

43. The system of claim 42, wherein the service management center is configured to cause the separate portions stored on the storage of the another gateway device to be restored to the storage of the gateway device when the gateway device requests a restore and is authenticated for that restore.