Methods and apparatus for providing data distribution that supports auditing

• US 8,417,799 B2
• Filed: 07/20/2010
• Issued: 04/09/2013
• Est. Priority Date: 10/24/2002
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: O'Toole, James W. Jr.
• Primary Examiner(s): DINH, KHANH Q
• Application Number:
  US12/840,168
• Publication Number:
  US 20110016229A1
• Time in Patent Office: 994 Days
• Field of Search: 709/220, 709/224, 709/228, 380/44, 380/282
• US Class Current: 709/220
• CPC Class Codes: H04N 21/23439 for generating different versions
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/83555 using a structured language for describing usage rules of the content, e.g. REL

Abstract

The invention is directed to techniques for providing data distribution that supports auditing. Accordingly, a data communications device receives data from a data provider, the data containing label information. The data communications device filters the data based on the label information contained in the data. Next, the data communications device associates token information with the data whereby the token information enables later audits of transmission of the data traveling through the data communications device. Finally, the data communications device transmits the data and the token information toward a data receiver. Filtering of the data results in certain data being removed and/or directed to a specific data receiver based on labels within the data. The data communications device also inserts a signature into the token in order to identify the data communications device transmitting the data in a manner that cannot be forged.

Claims

1. In a data communications device, a method for providing data distribution that supports auditing, the method comprising:

receiving data from a data provider, the data containing label information describing characteristics of the data;

filtering the data based on the label information contained in the data;

generating token information for the filtered data, wherein the token information uniquely identifies the filtered data and enables auditing capability of transmission of the data through the data communications device; and

transmitting the filtered data and the token information toward a data receiver.

2. The method of claim 1 wherein the data includes a plurality of data elements, each delineated in the data with label information, and wherein the method further comprises, for each data element in the data that includes a token insertion label:

creating a token of the token information;

associating a data descriptor with the token in a data distribution log of the data communications device; and

inserting the token into the data element such that the each data element identifies the token within the data element.

3. The method of claim 1, wherein the data is received and transmitted using a predefined packet size, wherein filtering and associating do not change the predefined packet size of the data, and wherein transmitting further comprises recalculating connection information including a check sum.

4. The method of claim 3, wherein the data includes token insertion filler information and

wherein inserting the token into the data element comprises replacing a portion of token insertion filler information with token information, such that a total predetermined of the token combined with the token insertion filler information remains constant.

5. The method of claim 1, wherein filtering

and associating modify the data to be a different size than the data when received and wherein transmitting further comprises adjusting connection information associated with transmission of a data to account for changes in size of the data.

6. The method of claim 1, wherein transmitting the data:

creating a signature for the data communications device;

associating the signature with the token information, wherein the signature enables token validation for the token information; and

forwarding the signature with the data and token information.

7. The method of claim 1, wherein the label information is arranged in a hierarchical manner having a number of different label levels and wherein filtering data comprises filtering the data based on the label information contained in the data at a predetermined number of label levels in hierarchy of labeling information.

8. A computer-readable non-transitory storage medium storing a program, which when executed on a processor, performs an operation for distributing data that supports auditing, the operation comprising:

receiving data from a data provider, the data containing label information describing characteristics of the data;

filtering the data based on the label information contained in the data;

generating token information for the filtered data, wherein the token information uniquely identifies the filtered data and enables auditing capability of transmission of the data through the data communications device; and

transmitting the filtered data and the token information toward a data receiver.

9. The computer-readable storage medium of claim 8, wherein the data includes a plurality of data elements, each delineated in the data with label information, and wherein the operation further comprises, for each data element in the data that includes a token insertion label:

creating a token of the token information;

associating a data descriptor with the token in a data distribution log of the data communications device; and

inserting the token into the data element, such that the each data element identifies the token within the data element.

10. The computer-readable storage medium of claim 8, wherein the data is received and transmitted using a predefined packet size, wherein filtering and associating do not change the predefined packet size of the data, and wherein transmitting further comprises recalculating connection information including a check sum.

11. The computer-readable storage medium of claim 10, wherein the data includes token insertion filler information and wherein inserting the token into the data element comprises replacing a portion of token insertion filler information with token information, such that a total predetermined size of the token combined with the token insertion filler information remains constant.

12. The computer-readable storage medium of claim 8, wherein filtering and associating modify the data to be a different size than the data when received and wherein transmitting further comprises adjusting connection information associated with transmission of a data to account for changes in size of the data.

13. The computer-readable storage medium of claim 8, wherein transmitting the data further comprises:

creating a signature for the data communications device;

associating the signature with the token information, wherein the signature enables token validation for the token information; and

forwarding the signature with the data and token information.

14. The computer-readable storage medium of claim 8, wherein the label information is arranged in a hierarchical manner having a number of different label levels and wherein filtering data comprises filtering the data based on the label information contained in the data at a predetermined number of label levels in hierarchy of labeling information.

15. A data communications device configured to distribute data, comprising,

a processor;

and

a memory storing a data distribution application, which when executed by the processor is configured to perform an operation for distributing data that supports auditing, the operation comprising;

receiving data from a data provider, the data containing label information describing characteristics of the data;

filtering the data based on the label information contained in the data;

generating token information for the data, wherein the token information uniquely identifies the filtered data and enables auditing capability of transmission of the data through the data communications device, and

transmitting the filtered data and the token information toward a data receiver.

16. The data communications device of claim 15, wherein the data includes a plurality of data elements, each delineated in the data with label information, and wherein the operation further comprises, for each data element in the data that includes a token insertion label:

creating a token of the token information;

associating a data descriptor with the token in a data distribution log of the data communications device; and

inserting the token into the data element such that the each data element identifies the token within the data element.

17. The data communications device of claim 15, wherein the data is received and transmitted using a predefined packet size, wherein filtering and associating do not change the predefined packet size of the data, and wherein transmitting further comprises recalculating connection information including a check sum.

18. The data communications device of claim 17, wherein the data includes token insertion filler information, and

wherein inserting the token into the data element comprises replacing a portion of token insertion filler information with token information, such that a total predetermined size of the token combined with the token insertion filler information remains constant.

19. The data communications device of claim 15, wherein filtering and associating modify the data to be a different size than the data when received and wherein transmitting further comprises adjusting connection information associated with transmission of a data to account for changes in size of the data.

20. The data communications device of claim 15, wherein the step of transmitting the data further comprises:

creating a signature for the data communications device;

associating the signature with the token information, wherein the signature enables token validation for the token information; and

forwarding the signature with the data and token information.

21. The data communications device of claim 15, wherein the label information is arranged in a hierarchical manner having a number of different label levels and wherein filtering data comprises filtering the data based on the label information contained in the data at a predetermined number of label levels in hierarchy of labeling information.

22. A computer-implemented method, comprising:

receiving, at a data communications device, data from a sender, the received data to be forwarded towards a recipient;

generating a token based on at least label information included in the received data;

storing the token with the received data; and

forwarding the received data, with the stored token, towards the recipient, wherein the token provides auditing capability of transmission of the received data through data through the data communications device.

23. The computer-implemented method of claim 22, further comprising:

filtering out one or more portions of the received data prior to forwarding the received data, with the stored token, toward the recipient.

24. The computer-implemented method of claim 22, wherein forwarding the received data comprises selectively forwarding one or more portions of the received data, with the stored token, towards the recipient.

25. The computer-implemented method of claim 22, further comprising:

recording an entry in a data distribution log, reflecting the transmission of the received data through the data communications device.