System and methods thereof for detection of content servers, caching popular content therein, and providing support for proper authentication

• US 9,703,970 B2
• Filed: 03/15/2013
• Issued: 07/11/2017
• Est. Priority Date: 08/22/2010
• Status: Active Grant

• Current Assignee: Qwilt, Inc.
• Original Assignee: Qwilt, Inc.
• Inventors: Hazan, Gaash
• Primary Examiner(s): ZAND, DAVOUD AMAN
• Application Number:
  US13/838,506
• Publication Number:
  US 20130212708A1
• Time in Patent Office: 1,579 Days
• Field of Search: 340 11- 161, 370252, 709223, 709224, 714 39, 714 471- 473, 714 11- 161
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching

Abstract

An apparatus and methods thereof provide for efficient usage of network bandwidth and ability to identify whether a client is authorized to receive such bandwidth. Content provided by a content source for a first content consumer is stored in the apparatus located in between the content source and the content consumer allowing delivery of such content to another content consumer from the apparatus thereby reducing the overall network load. For protected content, the apparatus identifies the need for authorization and provides a random identification to the target content consumer and storing that random identification as well as at least another parameter associated thereto such that when revalidation is necessary the content consumer can be validated by the apparatus.

Claims

1. An apparatus comprising:

a network interface;

a deep-packet-inspection (DPI) unit communicatively connected to the network interface for receiving one or more packets, the DPI unit configured to;

identify at least a source of content from a plurality of sources communicatively connected to the apparatus via a network connected to the apparatus that contains content useful for storage in the apparatus; and

, inspect the one or more packets provided from the identified at least a source of content;

wherein each packet has at least a specific source address and a specific destination address;

a storage unit for storing at least a portion of the content from the identified at least a source of content for a predetermined time period, the storage unit communicatively connected to the DPI unit and the network interface;

a content delivery unit communicatively connected to the DPI unit, the storage unit and the network interface, the content delivery unit configured to;

identify a request from a client node communicatively connected to the network interface for content from the identified at least a source of content;

determine whether the content requires an access authorization by the identified at least a source of content, receive an authorization from the at least a source of content;

generate a random identification (ID) associated uniquely with the client;

for allowing the client access to content of the at least a source of content stored in the storage unit requiring access authorization responsive of each request for content from the at least a source content by accompanying the each request with the random ID;

provide at least the random ID to the client; and

, store in a table the random ID and at least another parameter associated with the random ID.

2. The apparatus of claim 1, wherein the apparatus uses the network interface to connect to a network in one of:

a ‘

bump-in-the-wire’

mode and a sniffing mode.

3. The apparatus of claim 2, wherein the apparatus provides data from the storage unit to the client node from a dedicated network port.

4. The apparatus of claim 1, wherein the parameters associated with the random ID are at least one of:

an identifier of the content, a name of the content, a description of the content, an expiration time, a start time, a received token, and a client identifier.

5. The apparatus of claim 4, wherein the expiration time is periodically checked by the content delivery unit and when the expiration time has elapsed, the content delivery unit removes from the table an entry associated with the random ID having an expired time.

6. The apparatus of claim 4, wherein the expiration time is periodically extended in response to continued requests from the client node for content from the identified at least a source of content.

7. The apparatus of claim 1, wherein the content is one of:

a video stream, a video clip, an audio stream, an audio clip, a video frame, combinations thereof, and any portion thereof.

8. The apparatus of claim 1, wherein the content delivery unit, responsive to receiving the client random ID from the client node verifies that the client random ID exists in the table and if the client random ID does not exist in the table, the content delivery unit declines to provide content from the apparatus to the client node.

9. The apparatus of claim 8, wherein the content delivery unit, upon validating the existence of the client random ID in the table, validates at least one parameter associated with the random ID, and upon failure to pass validation of the at least one parameter, declines to provide content from the apparatus to the client node.

10. A method for an efficient usage of network bandwidth comprising:

identifying at least a content source from a plurality of sources to deliver content useful for storage over a network and inspecting packets provided from the identified at least a content source delivered to a network interface, each packet having at least a specific source address and a specific destination address;

storing in a storage at least popular content of the content delivered over the network received from the identified at least a content source;

receiving a request from a client over the network interface for certain content from the identified at least a content source;

determining whether the client is authorized to receive the certain content and in response to determining that the client is authorized to receive the certain content, receiving an authorization from the identified at least a content source;

generating a random identification (ID) for the client, for allowing the client access to content of the at least a source of content stored in the storage unit requiring access authorization responsive of each request for content from the at least a source content by accompanying the each request with the random ID, and providing the random ID and the certain content, or portions of the certain content, from the storage over the network if the certain content, or portions of the certain content, if stored in the storage, or otherwise sending a request over the network to the identified at least a content source for the certain content, or missing portions of the certain content; and

storing in a table in a memory the random ID, an identifier of the client and at least a parameter associated with the random ID.

11. The method of claim 10, wherein the associated at least a parameter is one of:

an identifier of the content, a name of the content, a description of the content, an expiration time, a start time, and a received token.

12. The method of claim 11, wherein the expiration time is periodically checked and when the expiration time has elapsed, an entry associated with the random ID having an expired time is removed from the table.

13. The method of claim 11, wherein the expiration time is periodically extended in response to continued requests from the client for content from the identified at least a source of content.

14. The method of claim 10, wherein the content is one of:

a video stream, a video clip, an audio stream, an audio clip, a video frame, combinations thereof, and portions thereof.

15. The method of claim 10, further comprising:

receiving the random ID from the client;

verifying that the random ID exists in the table; and

declining to provide content to the client if it is determined that the random ID does not exist in the table.

16. The method of claim 15, further comprising:

validating at least one parameter associated with the random ID; and

declining to provide content to the client upon failure of the validation of the at least one parameter.