Secure demand-driven file distribution

• US 10,200,489 B2
• Filed: 06/17/2016
• Issued: 02/05/2019
• Est. Priority Date: 06/17/2016
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Newell, Craig Farley, Jones, Michael Robert, Chamarajnagar, Ravishankar, Le, Hai James
• Primary Examiner(s): Shingles, Kristie D
• Application Number:
  US15/185,732
• Publication Number:
  US 20170366346A1
• Time in Patent Office: 963 Days
• Field of Search: 709219
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54

Abstract

Computer networks for secure demand-driven file distribution are described. In one example, a client device receives a notification to check in for updates. In response, the client device checks in with a device services computing device on a computer network. The device services computing device determines a path list to certain cache computing devices on the computer network for receipt of the files, builds a markup file including the path list to the files, and transmits the markup file to the client device. The markup file can also include unique identifiers of the files and an encryption key for secure distribution of the files. Using the markup file, the client device can request the files, and the computer network is physically and logically arranged to distribute the files among the cache computing devices and to the client device in a secure and demand-driven manner.

Claims

1. A system for file distribution, comprising:

a messaging computing device configured to transmit a notification based on a change in content in a distribution network;

a client device configured to receive the notification and transmit a check in request in response to the notification; and

a device services computing device configured to;

receive the check in request from the client device;

transmit a call to a global cache computing device for a path list of one or more of a plurality of cache computing devices in the distribution network for distribution of a file to the client device;

build a markup file including the path list for the file; and

transmit the markup file to the client device in response to the check in request.

2. The system of claim 1, wherein the device services computing device is further configured to determine whether one or more of the plurality of cache computing devices are part of a relay service for the client device.

3. The system of claim 1, wherein the device services computing device is further configured to:

determine a network address of the client device; and

forward the network address of the client device to the global cache computing device in the call for the path list.

4. The system of claim 3, wherein the global cache computing device is configured to determine the path list for distribution of the file to the client device based on the network address of the client device and a network distribution configuration for the plurality of cache computing devices.

5. The system of claim 4, wherein:

the plurality of cache computing devices are arranged in a plurality of peer levels; and

the path list identifies one or more of the plurality of cache computing devices in each of the plurality of peer levels for distribution of the file to the client device based on the network address of the client device and the network distribution configuration.

6. The system of claim 1, wherein the markup file includes the path list, a time-sensitive token associated with the path list, a unique file identifier for the file, and a unique key identifier for an encryption key for the file.

7. The system of claim 1, wherein:

the client device transmits a request for the file to a first cache computing device among the plurality of cache computing devices based on the path list in the markup file, the request for the file including the path list for the file; and

the first cache computing device is configured to;

determine whether the file exists in a local data store of the first cache computing device; and

in response to a determination that the file does not exist in the local data store, transmit a peer level request for the file to a second cache computing device in a peer level of the first cache computing device, the peer level of the first cache computing device including a subset of the plurality of cache computing devices.

8. The system of claim 7, wherein the cache computing device is further configured to:

in response to a determination that the file does not exist among the subset of the plurality of cache computing devices in the peer level of the first cache computing device, transmit a higher peer level request for the file to a higher peer level of the plurality of cache computing devices according to the path list for the file.

9. The system of claim 8, wherein at least one cache computing device in the peer level receives and stores the file from the higher peer level based on the higher peer level request.

10. A method for file distribution, comprising:

receiving, by at least one of one or more computing devices, a check in request from a client device;

determining, by at least one of the one or more computing devices, a path list of one or more of a plurality of cache computing devices in a distribution network for distribution of a file to the client device;

building, by at least one of the one or more computing devices, a markup file including the path list for the file; and

transmitting, by at least one of the one or more computing devices, the markup file to the client device in response to the check in request.

11. The method of claim 10, further comprising:

identifying, by at least one of the one or more computing devices, a change in content in a distribution network; and

transmitting, by at least one of the one or more computing devices, a notification to the client device based on the change in file content.

12. The method of claim 10, further comprising:

generating, by at least one of the one or more computing devices, a time-sensitive token associated with the path list, a unique file identifier for the file, and a unique key identifier for an encryption key for the file; and

including, by at least one of the one or more computing devices, the time-sensitive token, the unique file identifier, and the unique key identifier in the markup file.

13. The method of claim 10, wherein the path list is further determined based on a network address of the client device and a network distribution configuration for the plurality of cache computing devices.

14. The method of claim 13, wherein:

the plurality of cache computing devices are arranged in a plurality of peer levels; and

the path list identifies one or more of the plurality of cache computing devices in each of the plurality of peer levels for distribution of the file to the client device based on the network address of the client device and the network distribution configuration.

15. The method of claim 14, further comprising:

receiving, by a first cache computing device among the plurality of cache computing devices, a request for the file from the client device, the request for the file including the path list for the file;

determining, by the first cache computing device, whether the file exists in a local data store; and

in response to a determination that the file does not exist in the local data store, transmitting, by the first cache computing device, a peer level request for the file to a second cache computing device in a peer level of the first cache computing device, the peer level of the first cache computing device including a subset of the plurality of cache computing devices.

16. The method of claim 15, further comprising, in response to a determination that the file does not exist among the subset of the plurality of cache computing devices in the peer level of the first cache computing device, transmitting, by the first cache computing device, a higher peer level request for the file to a higher peer level of the plurality of cache computing devices according to the path list for the file.

17. A non-transitory computer-readable medium embodying program code executable in one or more computing devices, the program code being configured to cause at least one of the one or more computing devices to at least:

receive a check in request from a client device;

determine a path list of one or more of a plurality of cache computing devices in a distribution network for distribution of a file to the client device;

generate a time-sensitive token associated with the path list, a unique file identifier for the file, and a unique key identifier for an encryption key for the file;

build a markup file including the path list for the file, the token associated with the path list, the unique file identifier, and the unique key identifier; and

transmit the markup file to the client device in response to the check in request.

18. The non-transitory computer-readable medium of claim 17, wherein the program code is further configured to cause at least one of the one or more computing devices to at least:

receive a request for the file from the client device, the request for the file including the path list, the unique file identifier, and unique key identifier, and the time-sensitive token;

determine whether the path list is valid based on the time-sensitive token; and

in response to a determination that the path list is valid, determine whether the file exists in a local data store based on the unique file identifier.

19. The non-transitory computer-readable medium of claim 18, wherein the program code is further configured to cause at least one of the one or more computing devices to at least:

decrypt the file based on the unique key identifier and transmit the file to the client device in response to a determination that the file exists in the local data store.

20. The non-transitory computer-readable medium of claim 18, wherein the program code is further configured to cause at least one of the one or more computing devices to at least:

transmit a peer level request for the file to another one of the one or more computing devices in response to a determination that the file does not exist in the local data store.