High-speed WAN to wireless LAN gateway

• US 9,485,804 B1
• Filed: 10/13/2014
• Issued: 11/01/2016
• Est. Priority Date: 06/27/2006
• Status: Active Grant

• Current Assignee: Stripe, Inc.
• Original Assignee: Qurio Holdings Incorporated
• Inventors: Evans, Gregory M.
• Primary Examiner(s): Wong, Warner
• Application Number:
  US14/512,750
• Time in Patent Office: 750 Days
• Field of Search: 370/401
• US Class Current: 1/1
• CPC Class Codes: G06F 12/0813 with a network or matrix configuration
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 2212/154 Networked environment
• CPC Class Codes: G06F 2212/60 Details of cache memory
• CPC Class Codes: G06F 2212/62 Details of cache specific to multiprocessor cache arrangements
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 12/4013 Management of data rate on the bus systems modifying transmission characteristics according to link quality H04L1/0001
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 47/22 Traffic shaping
• CPC Class Codes: H04L 47/25 with rate being modified by the source upon detecting a change of network conditions
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 65/765 intermediate
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/5682 Policies or rules for updating, deleting or replacing the stored data
• CPC Class Codes: H04W 36/22 for handling the traffic
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/16 Gateway arrangements

Abstract

A gateway interconnecting a high speed Wide Area Network (WAN) and a lower speed Wireless Local Area Network (WLAN) is provided. The high speed WAN is preferably connected to the gateway via a Fiber-to-the Home (FTTH) connection and associated FTTH modem. In general, the gateway includes an adaptable cross-layer offload engine operating to manage bandwidth between the high speed WAN and the lower speed WLAN. As data enters the gateway from the WAN at the high speed data rate of the WAN, the offload engine stores the data in a non-secure data cache. A rule check engine performs a stateless or stateful inspection of the data in the non-secure data cache. Thereafter, the data is moved from the non-secure data cache to a secure data cache and thereafter transmitted to an appropriate user device in the WLAN at the lower data rate of the WLAN.

Claims

1. A gateway interconnecting a first network to a second network comprising:

an offload engine that is implemented in a cross-layer architecture enabling communication between non-adjacent layers in a protocol stack of the gateway;

a data cache associated with the offload engine;

a network interface communicatively coupling the offload engine to the first network and providing a first data rate;

an interface associated with the offload engine and adapted to communicate with a plurality of user devices within the second network, the interface providing a second data rate that is less than the first data rate;

wherein the offload engine is adapted to;

receive content from the first network via the network interface at the first data rate;

store received content in the data cache such that the first data rate is supported by the gateway; and

transmit the stored content from the data cache to a corresponding one of the plurality of user devices in the second network via the network interface at the second data rate;

a rule check engine adapted to inspect the content from the first network based upon at least one rule prior to transmitting the content to the corresponding one of the plurality of user devices in the second network, wherein the at least one rule comprises at least one Digital Rights Management (DRM) rule; and

a DRM function initiated by the rule check engine based on the at least one DRM rule, wherein;

the rule check engine is further adapted to inspect the content based on the at least one DRM rule to identify data to be processed by the DRM function and initiate the DRM function for the identified data; and

the DRM function is adapted to encode the identified data such that encoded data is transmitted to the corresponding one of the plurality of user devices within the second network, and provide license keys for decoding the encoded data to desired ones of the plurality of user devices having permission to consume the encoded data.

2. The gateway of claim 1 wherein the network interface is coupled to the second network via a Fiber-to-the-Home (FTTH) connection.

3. The gateway of claim 1 wherein the network interface operates according to one of the plurality of IEEE 802.11 standards.

4. The gateway of claim 1 wherein the first data rate provided by the network interface is at least 1 Gigabit per second (Gbps).

5. The gateway of claim 4 wherein the second data rate provided by the second network is less than or equal to 500 Megabits per second (Mbps).

6. The gateway of claim 1 wherein the rule check engine performs a stateful inspection of the content.

7. The gateway of claim 1 wherein the rule check engine performs a stateless inspection of the content.

8. The gateway of claim 1 wherein the at least one rule comprises at least one intrusion detection rule for detecting malicious network traffic.

9. The gateway of claim 6 wherein the at least one rule comprises at least one content rule identifying a type of content to block from entering the second network.

10. The gateway of claim 1 further comprising a file format conversion function adapted to convert the content that is in a first file format to a second file format having lesser bandwidth requirements.

11. The gateway of claim 1 further comprising a conversion function adapted to convert the content corresponding to a media file having a first quality to a media file having a lesser quality, thereby reducing bandwidth requirements for transferring the media file over the second network.

12. The gateway of claim 1, wherein the rule check engine is further adapted to:

inspect received content to identify data in a specified file format; and

initiate a file format conversion function adapted to convert the content to a new file format having lesser bandwidth requirements prior to transmission of the identified data over the second network.

13. The gateway of claim 1, wherein the rule check engine is further adapted to:

inspect received content to identify data corresponding to a media file in a specified file format; and

initiate a conversion function adapted to reduce a quality of the media file prior to transmission of the identified data over the second network.

14. The gateway of claim 1 wherein the offload engine is further adapted to:

receive outgoing data from one of the plurality of user devices within the second network at the second data rate provided by the interface;

buffer the outgoing data in the data cache; and

transmit the outgoing data from the data cache to a desired end point via the network interface at the first data rate of the network interface.

15. The gateway of claim 14, wherein the

rule check engine is further adapted to inspect the outgoing data to identify data desired to be encoded prior to transmission over the first network and the DRM function is further

adapted to encode the identified data prior to transmission over the first network.

16. The gateway of claim 1 wherein the first network is a Wide Area Network (WAN).

17. The gateway of claim 1 wherein the second network is a Local Area Network (LAN).

18. A method of interconnecting a first network and a second network comprising:

receiving content from the first network at a first data rate;

offloading received content to a data cache;

transmitting the offloaded content from the data cache to a corresponding one of a plurality of user devices within the second network at a second data rate that is less than the first data rate of the first network, wherein the content is offloaded to the data cache such that the first and second data rates are supported;

inspecting the content in the data cache based on at least one Digital Rights Management (DRM) rule to identify data to be processed by a DRM function;

encoding the identified data using the DRM function such that the encoded data is transmitted to the corresponding one of the plurality of user devices within the second network; and

providing license keys for decoding the encoded data to desired ones of the plurality of user devices having permission to consume the encoded data.

19. The method of claim 18 wherein transmitting the content from the data cache comprises transmitting the content from the data cache according to an adaptable cross-layering scheme.

20. The method of claim 18 wherein receiving the content comprises receiving the content from the first network via a Fiber-to-the-Home (FTTH) connection.

21. The method of claim 18 further comprising inspecting the content from the first network in the data cache based upon at least one rule prior to transmitting the content to the corresponding one of the plurality of user devices in the second network.

22. The method of claim 18 further comprising:

inspecting received content to identify data in a specified file format;

converting the identified data to a new file format having lesser bandwidth requirements; and

transmitting the identified data in the new file format to the corresponding one of the plurality of user devices within the second network.

23. The method of claim 18 further comprising:

inspecting received content to identify data corresponding to a media file in a specified file format;

reducing a quality of the media file, thereby reducing bandwidth requirements of the media file; and

transmitting the reduced quality media file to the corresponding one of the plurality of user devices in the second network.

24. The gateway of claim 18 wherein the first network is a Wide Area Network (WAN).

25. The gateway of claim 18 wherein the second network is a Local Area Network (LAN).

26. A gateway device comprising:

a first interface for receiving content at a first data rate in a first format from a first network;

a data cache for storing received content;

a rules check engine for determining Digital Rights Management (DRM) rules for received content;

a format conversion function for processing received content from the first format to a second format having a different data rate requirement;

a DRM encoder for encoding the converted content for authorized devices of a second network; and

a second interface for transmitting the encoded content over the second network.

27. The gateway of claim 26 wherein the first network is a Wide Area Network (WAN).

28. The gateway of claim 26 wherein the second network is a Local Area Network (LAN).

29. The gateway of claim 28 wherein the LAN is a Wireless Local Area Network (WLAN).

30. The gateway of claim 29 wherein the WLAN operates according to one of the 802.11 standards.

31. A gateway device comprising:

a first interface for receiving content having a first bandwidth requirement in a first format from a first network;

a data cache for storing the content;

a rules check engine for determining Digital Rights Management (DRM) rules for the content;

a format conversion function for processing the content from the first format to a second format having a second lesser bandwidth requirement;

a DRM encoder for encoding the converted content for authorized devices of a second network; and

a second interface for transmitting the encoded content over the second network.

32. The gateway device of claim 31 wherein the first network is a Wide Area Network (WAN).

33. The gateway device of claim 31 wherein the second network is a Local Area Network (LAN).

34. The gateway device of claim 33 wherein the LAN is a Wireless Local Area Network (WLAN).

35. The gateway device of claim 34 wherein the WLAN operates according to one of the 802.11 standards.

36. The gateway device of claim 35 where the second interface establishes an alternate point-to-point wireless link between the gateway and the one of the plurality of user devices.

37. The gateway device of claim 31 wherein the first interface is an Ethernet interface.

38. The gateway device of claim 31 wherein the second interface is an Ethernet interface.

39. The gateway device of claim 31 further comprising an Ethernet switch providing one or more wired connections to the plurality of user devices.

40. The gateway device of claim 31 wherein the content is video content in an MPEG format.

41. The gateway device of claim 31 wherein the gateway provides a streaming MPEG application.

42. The gateway device of claim 31 wherein the second format is a reduced quality of the first format.

43. The gateway device of claim 31 wherein the reduced quality is selected from the group consisting of reduced resolution, reduced bit rate, and reduced frame rate.

44. A method comprising:

receiving content having a first bandwidth requirement in a first format from a first network at a first interface;

storing the content;

determining Digital Rights Management (DRM) rules for the content;

processing the content from the first format to a second format having a second lesser bandwidth requirement;

encoding the converted content for authorized devices of a second network; and

transmitting the encoded content over the second network from a second interface.

45. The method of claim 44 wherein the first network is a Wide Area Network (WAN).

46. The method of claim 44 wherein the second network is a Local Area Network (LAN).

47. The method of claim 46 wherein the LAN is a Wireless Local Area Network (WLAN).

48. The method of claim 47 wherein the WLAN operates according to one of the 802.11 standards.

49. The method of claim 44 where the second interface establishes an alternate point-to-point wireless link between the gateway and the one of the plurality of user devices.

50. The method of claim 44 wherein the first interface is an Ethernet interface.

51. The method of claim 44 wherein the second interface is an Ethernet interface.

52. The method of claim 44 further comprising an Ethernet switch providing one or more wired connections to the plurality of user devices.

53. The method of claim 44 wherein the content is video content in an MPEG format.

54. The method of claim 44 wherein the gateway provides a streaming MPEG application.