High-speed WAN to wireless LAN gateway

• US 9,832,700 B2
• Filed: 10/31/2016
• Issued: 11/28/2017
• Est. Priority Date: 06/27/2006
• Status: Active Grant

• Current Assignee: Stripe, Inc.
• Original Assignee: Qurio Holdings Incorporated
• Inventors: Evans, Gregory M.
• Primary Examiner(s): Wong, Warner
• Application Number:
  US15/338,478
• Publication Number:
  US 20170048778A1
• Time in Patent Office: 393 Days
• Field of Search: 370401
• CPC Class Codes: G06F 12/0813 with a network or matrix configuration
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 2212/154 Networked environment
• CPC Class Codes: G06F 2212/60 Details of cache memory
• CPC Class Codes: G06F 2212/62 Details of cache specific to multiprocessor cache arrangements
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 12/4013 Management of data rate on the bus systems modifying transmission characteristics according to link quality H04L1/0001
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 47/22 Traffic shaping
• CPC Class Codes: H04L 47/25 with rate being modified by the source upon detecting a change of network conditions
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 65/765 intermediate
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/5682 Policies or rules for updating, deleting or replacing the stored data
• CPC Class Codes: H04W 36/22 for handling the traffic
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/16 Gateway arrangements

Abstract

A gateway interconnecting a high speed Wide Area Network (WAN) and a lower speed Wireless Local Area Network (WLAN) is provided. The high speed WAN is preferably connected to the gateway via a Fiber-to-the Home (FTTH) connection and associated FTTH modem. In general, the gateway includes an adaptable cross-layer offload engine operating to manage bandwidth between the high speed WAN and the lower speed WLAN. As data enters the gateway from the WAN at the high speed data rate of the WAN, the offload engine stores the data in a non-secure data cache. A rule check engine performs a stateless or stateful inspection of the data in the non-secure data cache. Thereafter, the data is moved from the non-secure data cache to a secure data cache and thereafter transmitted to an appropriate user device in the WLAN at the lower data rate of the WLAN.

Claims

1. A residential gateway within a customer premises interconnecting a Wide Area Network (WAN) external to the customer premises to a lower speed Wireless Local Area Network (WLAN) within the customer premises, the residential gateway comprising:

an adaptable cross-layer offload engine;

a data cache associated with the offload engine;

a network interface communicatively coupling the offload engine to the WAN and providing a first data rate; and

a wireless interface associated with the offload engine and adapted to communicate with a plurality of user devices within the WLAN, the interface providing a second data rate that is less than the first data rate of the network interface;

wherein the offload engine is adapted to;

receive incoming data from the WAN via the network interface at the first data rate;

store the incoming data in the data cache; and

transmit the incoming data from the data cache to a corresponding one of the plurality of user devices in the WLAN via the wireless interface at the second data rate;

further wherein the gateway further comprises;

a rule check engine adapted to inspect the incoming data from the WAN based upon at least one rule prior to transmitting the incoming data to the corresponding one of the plurality of user devices in the WLAN, the at least one rule comprises at least one Digital Rights Management (DRM) rule and the rule check engine operates to identify content comprising at least a portion of a media file to be processed by a DRM function and initiate the DRM function for the identified content; and

a file format conversion function adapted to convert the identified content that is in a first viewable or playable file format to converted content in a second viewable or playable file format having lesser bandwidth requirements than the first file format;

wherein the DRM function is initiated by the rule check engine based on the at least one DRM rule, the DRM function being adapted to;

encrypt the converted content independent of any encryption of the incoming data transmitted over the WLAN, such that encrypted content is transmitted to the corresponding one of the plurality of user devices within the WLAN preventing unauthorized viewing or playing of the converted content via the corresponding one of the plurality of user devices, and

provide license keys for decrypting the encrypted content to desired ones of the plurality of user devices having permission to view or play the converted content.

2. The gateway of claim 1 wherein the offload engine comprises a number of protocol stack layers from a protocol stack of the gateway and is implemented in a cross-layer architecture enabling direct communication between non-adjacent layers in the protocol stack.

3. The gateway of claim 1 wherein the network interface is coupled to the WAN via a Fiber-to-the-Home (FTTH) connection.

4. The gateway of claim 1 wherein the network interface operates according to one of the plurality of IEEE 802.11 standards.

5. The gateway of claim 1 wherein the first data rate provided by the network interface is at least 1 Gigabit per second (Gbps).

6. The gateway of claim 5 wherein the second data rate provided by the WLAN is less than or equal to 500 Megabits per second (Mbps).

7. The gateway of claim 1 wherein the rule check engine performs a stateful inspection of the incoming data.

8. The gateway of claim 1 wherein the rule check engine performs a stateless inspection of the incoming data.

9. The gateway of claim 1 wherein the at least one rule comprises at least one intrusion detection rule for detecting malicious network traffic.

10. The gateway of claim 1 wherein the at least one rule further comprises at least one content rule identifying a type of content to block from entering the WLAN.

11. The gateway of claim 1 wherein the conversion function adapted to convert the identified content corresponding to a media file having a first quality to a media file having a lesser quality, thereby reducing bandwidth requirements for transferring the media file over the WLAN.

12. The gateway of claim 1 wherein the rule check engine is further adapted to:

inspect the incoming data to identify content in a specified file format; and

initiate the file format conversion function adapted to convert the identified content to a new file format having lesser bandwidth requirements than the specified file format prior to transmission of the identified content over the WLAN.

13. The gateway of claim 1 wherein the rule check engine is further adapted to:

inspect the incoming data to identify content corresponding to a media file in a specified file format; and

initiate a conversion function adapted to reduce a quality of the media file prior to transmission of the identified content over the WLAN.

14. The gateway of claim 1 wherein the offload engine is further adapted to:

receive outgoing data from one of the plurality of user devices within the WLAN at the second data rate provided by the wireless interface;

buffer the outgoing data in the data cache; and

transmit the outgoing data from the data cache to a desired end point via the network interface at the first data rate of the network interface.

15. The gateway of claim 14 wherein the rule check engine is further adapted to inspect the outgoing data to identify content comprising a related portion of the outgoing data desired to be encrypted prior to transmission over the WAN;

and the DRM function is further adapted to encrypt the identified content comprising a portion of the outgoing data prior to transmission over the WAN to prevent unauthorized viewing or playing thereof.

16. A method of interconnecting a Wide Area Network (WAN) external to a customer premises and a lower speed Wireless Local Area Network (WLAN) within the customer premises via a residential gateway within the customer premises, the method comprising:

receiving incoming data from the WAN at a first data rate;

offloading the incoming data to a data cache;

inspecting the incoming data from the WAN based upon at least one Digital Rights Management (DRM) rule to identify content comprising at least a portion of a media file to be processed by a DRM function;

converting the media file that is in a first viewable or playable file format to converted content in a second viewable or playable file format having lesser bandwidth requirements than the first file format;

encrypting by the DRM function, the converted content independent of any encryption of the incoming data transmitted over the WLAN to provide encrypted content preventing unauthorized viewing or playing of the converted content;

transmitting the incoming data, including the encrypted content, from the data cache to a corresponding one of a plurality of user devices within the WLAN at a second data rate of the WLAN that is less than the first data rate of the WAN; and

providing license keys for decrypting the encrypted content to the corresponding one of the plurality of user devices if the corresponding one of the plurality of user devices has permission to view or play the encrypted content.

17. The method of claim 16 wherein transmitting the incoming data from the data cache comprises transmitting the incoming data from the data cache using a communications protocol stack comprising a number of protocol stack layers according to an adaptable cross-layering scheme enabling direct communication between non-adjacent layers in the protocol stack.

18. The method of claim 16 wherein receiving the incoming data comprises receiving the incoming data from the WAN via a Fiber-to-the-Home (FTTH) connection.

19. The method of claim 16 further comprising:

inspecting the incoming data to identify content in a specified file format;

converting the identified content to a new file format having lesser bandwidth requirements than the specified file format; and

transmitting the identified content in the new file format to the corresponding one of the plurality of user devices within the WLAN.

20. The method of claim 16 further comprising:

inspecting the incoming data to identify content corresponding to a media file in a specified file format;

reducing a quality of the media file, thereby reducing bandwidth requirements of the media file; and

transmitting the reduced quality media file to the corresponding one of the plurality of user devices in the WLAN.