Network apparatus based on content name and method for protecting content

• US 9,344,429 B2
• Filed: 06/11/2012
• Issued: 05/17/2016
• Est. Priority Date: 06/09/2011
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Kim, Eun Ah, Kim, Dae Youb, Lee, Byoung-Joon, Huh, Mi Suk
• Primary Examiner(s): Revak, Christopher
• Assistant Examiner(s): CHIANG, JASON
• Application Number:
  US13/492,967
• Publication Number:
  US 20120317613A1
• Time in Patent Office: 1,436 Days
• Field of Search: 726/1
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A content protection method includes generating content protection information regarding a content to be protected by a content producer, and generating a content name indicating a location of the content in content name based networks based on the content protection information. The content protection information may include at least one of marking information indicating whether the content is protected and policy information indicating a disclosure range of the content.

Claims

1. A content protection method for a network device comprising:

generating content protection information containing marking information indicating whether content is protected and policy information indicating a disclosure range of the content;

generating a content name indicating a location of the content in content name based networks, based on the content protection information;

receiving a content request message requesting transmission of the content; and

determining whether to transmit a content response message responding to the content request message based on the content protection information and a location of the content protection information,

wherein the location of the content protection information with respect to an object being protected determines a level of protection of the object.

2. The content protection method of claim 1, wherein

the generating of the content protection information generates the content protection information while generating the content, and

the marking information indicates that the content name contains a policy regarding whether to allow or prevent access of at least one of another network device and an external network device with respect to the content.

3. The content protection method of claim 1, wherein

the generating of the content protection information generates the policy information in the form of any of an offset, a number, a pseudo code, and a domain list, and

the policy information indicates the disclosure range in which transmission of the content is allowed.

4. The content protection method of claim 1, wherein

the content name comprises a plurality of components, and

the content protection information comprises a single component included in the content name.

5. The content protection method of claim 4, wherein

the generating of the content name generates the content name such that the content protection information is located within a range allowing a digital signature with respect to the content among the plurality of components.

6. The content protection method of claim 1, wherein the generating of the content name is performed such that the content protection information is located sequentially after a component where network domain name information is located.

7. The content protection method of claim 1, wherein the generating of the content name is performed such that the content protection information is located after a component where content name information is located.

8. The content protection method of claim 1, wherein the generating of the content name is performed such that the content protection information is located between version information and segment information.

9. The content protection method of claim 1, wherein the determining of whether to transmit the content response message comprises:

confirming whether content designated by the content request message is stored; and

determining whether to transmit the content response message that contains the content based on the content protection information when the content is confirmed to be stored.

10. The content protection method of claim 9, wherein the determining of whether to transmit the content response message comprises:

confirming whether the content set for access protection based on the marking information; and

confirming whether a network device corresponding to a higher level domain is within the disclosure range based on the policy information when the content is confirmed to be set for the access protection.

11. The content protection method of claim 10, wherein the determining of whether to transmit the content response message comprises:

determining to prevent transmitting of the content response message when the network device corresponding to the higher level domain is confirmed to be beyond the disclosure range.

12. The content protection method of claim 10, wherein the determining of whether to transmit the content response message comprises:

determining to transmit the content response message to the network device corresponding to the higher level domain when the network device corresponding to the higher level domain is confirmed to be within the disclosure range.

13. The content protection method of claim 1, wherein the content request message comprises at least one selected from a content name, a content object, a domain name of a content network, a domain hierarchy of the content network, and a content list included in a domain of a particular content network.

14. The content protection method of claim 1, wherein the content name comprises at least one selected from a domain name of a content network, a unique content name, version information of a content, the content protection information, and segment information.

15. The content protection method of claim 1, wherein the content name includes a unique identifier for identifying the content in the content name based networks.

16. The content protection method of claim 1, wherein the content name includes a hierarchical network domain structure or content belonging to the hierarchical network domain structure.

17. The content protection method of claim 1, wherein the disclosure range of the content includes an offset, a character code, a number code, a pseudo code, or a domain list showing a range of domains to disclose the content.

18. A network device comprising:

a content protection information generation unit to generate content protection information containing marking information indicating whether content is protected and policy information indicating a disclosure range of the content;

a content name generation unit to generate the content name indicating a location of the content in content name based networks, based on the content protection information;

a message receiving unit to receive a content request message requesting transmission of the content; and

a determination unit to determine whether to transmit a content response message responding to the content request message based on the content protection information and a location of the content protection information,

wherein the location of the content protection information with respect to an object being protected determines a level of protection of the object.

19. The network device of claim 18, wherein the content protection information generation unit generates the content protection information while generating the content, and

the marking information indicates that the content name contains a policy regarding whether to allow or prevent access of at least one of another network device and an external network device with respect to the content.

20. The network device of claim 18, wherein the content protection information generation unit generates the policy information in the form of any of an offset, a number, a pseudo code, and a domain list, and

the policy information indicates a disclosure range in which transmission of the content is allowed.

21. The network device of claim 18, wherein

the content name comprises a plurality of components, and

the content protection information comprises a single component included in the content name.

22. The network device of claim 21, wherein the content protection information generation unit generates the content name such that the content protection information is located within a range allowing a digital signature with respect to the content among the plurality of components.

23. The network device of claim 18, wherein the content name generation unit generates the content name such that the content protection information is located sequentially after a component where domain name information is located.

24. The network device of claim 18, wherein the content protection information generation unit generates the content name such that the content protection information is located after a component where content name information is located.

25. The network device of claim 18, wherein the content name generation unit generates the content name such that the content protection information is located between version information and segment information.

26. The network device of claim 18, wherein the determination unit comprises:

a confirmation unit to confirm whether content designated by the content request message is stored; and

a transmission determination unit to determine whether to transmit the content response message that includes the content based on the content protection information when the content is confirmed to be stored.

27. The network device of claim 26, wherein the confirmation unit confirms whether the content is protected from access based on the marking information when the content is confirmed to be stored, and also confirms whether a network device corresponding to a higher level domain is included in the disclosure range based on the policy information when the content is confirmed to be protected from access.

28. The network device of claim 27, wherein the transmission determination unit determines to prevent transmitting of the content response message when the network device corresponding to the higher level domain is confirmed to be beyond the disclosure range.

29. The network device of claim 27, wherein the transmission determination unit determines to transmit the content response message to the network device corresponding to the higher level domain when the network device corresponding to the higher level domain is confirmed to be within the disclosure range.

30. The network device of claim 18, wherein the content request message comprises at least one selected from a content name, a content object, a domain name of a content network, a domain hierarchy of the content network, and a content list included in a domain of a particular content network.

31. The network device of claim 18, wherein the content name comprises at least one selected from a domain name of a content network, a unique content name, version information of a content, the content protection information, and segment information.