Secure anonymity in a media exchange network

• US 8,489,876 B2
• Filed: 11/16/2010
• Issued: 07/16/2013
• Est. Priority Date: 12/11/2002
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Karaoguz, Jeyhan, Bennett, James
• Primary Examiner(s): Parthasarathy, Pramila
• Application Number:
  US12/947,071
• Publication Number:
  US 20110072155A1
• Time in Patent Office: 973 Days
• Field of Search: None
• US Class Current: 713/155
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A method for communicating of information in a communication network is disclosed and includes receiving media containing a security code from a first communication device at a third communication device. The security code is acquired by the first communication device from a second communication device. The received media may be routed to the second communication device based on an IP address of the second communication device. The IP address of the second communication device may correspond to the security code. The security code may be translated to the IP address of the second communication device. The security code may be a pin code. A duration for which the security code is valid may be limited to at least one of time and a number of uses.

Claims

1. A method comprising:

at a media exchange server,

receiving over a network media information and security information from a media source, the media information to be communicated to a media destination in data communication with the media exchange server, the security information originating with the media destination and being provided to the media source in response to a request from the media source;

based on the security information, determining address information for the media destination so that the address information remains unknown to the media source; and

communicating the media information to the media destination at a network location defined by the address information for the media destination.

2. The method of claim 1 wherein receiving the security information comprises receiving one of a pin code, a device identifier, a public key or a device number.

3. The method of claim 1 wherein receiving the security information comprises receiving security information having a limited lifetime of validity.

4. The method of claim 1 wherein receiving the security information comprises receiving security information having a limited lifetime of validity for the media source.

5. The method of claim 1 further comprising:

storing the received media information in a media storage server;

authorizing the communication of the media information to the media destination; and

after the authorization, communicating the media information to the media destination.

6. The method of claim 1 wherein determining address information for the media destination comprises translating at least a portion of the received security information from the media source into a network address for the media destination.

7. The method of claim 1 wherein determining address information for the media destination comprises translating at least a portion of the received security information from the media source into one of a Media Access Control (MAC) layer address or device identified for the media destination.

8. The method of claim 1 wherein communicating the media information to the media destination at a network location comprises transmitting the media information to a set top box for display to a user.

9. A method comprising:

at a media exchange server,

receiving over a network media information and security information from a media source, the media information to be communicated to a media destination in data communication with the media exchange server, wherein the security information originates with a web site on a media exchange network including the media source and the media exchange server;

based on the security information, determining address information for the media destination so that the address information remains unknown to the media source; and

communicating the media information to the media destination at a network location defined by the address information for the media destination.

10. A method, comprising:

at a proxy server, establishing a limited lifetime certification that is either valid for a predetermined period of time or that is valid for a limited number of uses;

establishing the limited lifetime certificate as verification security information;

receiving at the proxy server, over a network, security information from a media source, the security information originating with a media destination;

verifying the security information at the proxy server;

in response to the verification, sending the verification security information from the proxy server to the media source;

at the proxy server, receiving from the media source media information to be communicated to a media destination and the verification security information;

at the proxy server, verifying the received verification security information; and

at the proxy server, if the received verification security information is verified, communicating the media information to the assigned network address.

11. The method of claim 10 wherein sending the verification security information to the media source comprises sending a digital certificate to the media source.

12. The method of claim 11 wherein sending a digital certificate to the media source comprises sending a device identifier, a public key or a code corresponding uniquely to the media destination.

13. The method of claim 10 wherein sending the verification security information to the media source comprises sending a one-time-use digital certificate to the media source.

14. The method of claim 10 wherein receiving at information from a media source comprises receiving a limited lifetime pin code from a personal computer of a user having a media file to share with the media destination.

15. A non-transitory machine-readable storage medium having stored thereon a computer program having at least one code section for communicating information in a communication network, the at least one code section being executable by a machine for causing the machine to perform steps comprising:

receiving over a network media information from a third party provider and security information from a media source, the media information to be communicated to a media destination in data communication with the machine, the security information being valid for a limited time period to authorize communication of the media information to the media destination during the limited time period;

based on the security information, determining address information for the media destination so that the address information remains unknown to the media source;

communicating the media information to the media destination at a network location defined by the address information for the media destination; and

suspending communication of the media information to the media destination after lapse of the limited time period.

16. The non-transitory machine-readable storage medium of claim 15 further comprising code for causing the machine to perform steps comprising:

storing the received media information;

determining if communication of the media information to the media destination;

is authorized and

after the authorization, communicating the media information to the media destination.