Reconstructable content objects

• US 10,237,075 B2
• Filed: 04/10/2017
• Issued: 03/19/2019
• Est. Priority Date: 07/17/2014
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Mosko, Marc E.
• Primary Examiner(s): Hoffman, Brandon S
• Assistant Examiner(s): Anderson, Michael D
• Application Number:
  US15/483,826
• Publication Number:
  US 20170222812A1
• Time in Patent Office: 708 Days
• Field of Search: 713176
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 65/612 for unicast
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

One embodiment of the present invention provides a system for delivering a content piece over a network using a set of reconstructable objects. During operation, the system obtains a metadata file that includes a set of rules; generates the set of reconstructable objects for the content piece based on the set of rules included in the metadata file; cryptographically signs the set of reconstructable objects to obtain a set of signed reconstructable objects; and delivers, over the network, the set of signed reconstructable objects along with the metadata file to a recipient, thereby enabling the recipient to extract and store a copy of the content piece and then to reconstruct the set of signed reconstructable objects from the stored copy of the content piece and the metadata file.

Claims

1. A computer-executable method, comprising:

obtaining, by a computer, one or more rules of a group consisting of;

a rule that specifies how to chunk content to form a payload of a corresponding reconstructable object;

a rule that specifies a signing key;

a rule that specifies whether to include a secure catalog; and

a rule that specifies how to generate the secure catalog based on a set of reconstructable objects;

generating the set of reconstructable objects for the content based on the one or more rules;

inserting a signature into each reconstructable object or into the secure catalog to obtain a set of signed reconstructable objects; and

delivering the set of signed reconstructable objects along with the one or more rules.

2. The method of claim 1, wherein the set of signed reconstructable objects is generated further based on the content.

3. The method of claim 2, wherein the inserting involves cryptographically signing the set of reconstructable objects.

4. The method of claim 3, wherein the cryptographically signing the set of reconstructable objects involves using the signing key to sign each reconstructable object or to sign the secure catalog.

5. The method of claim 1, further comprising:

extracting payloads and one or more signatures from the set of signed reconstructable objects; and

assembling the content using the payloads.

6. The method of claim 5, further comprising:

verifying the one or more signatures based on the signing key, wherein the extracting involves extracting the one or more signatures from each signed reconstructable object or from the secure catalog.

7. The method of claim 1, further comprising:

generating the secure catalog based on the rule that specifies how to generate the secure catalog.

8. A non-transitory, computer-readable storage medium storing instructions that, when executed by a computing device, cause the computing device to perform a method comprising:

obtaining one or more rules of a group consisting of;

a rule that specifies how to chunk content to form a payload of a corresponding reconstructable object;

a rule that specifies a signing key;

a rule that specifies whether to include a secure catalog; and

a rule that specifies how to generate the secure catalog based on a set of reconstructable objects;

generating the set of reconstructable objects for the content based on the one or more rules;

inserting a signature into each reconstructable object or into the secure catalog to obtain a set of signed reconstructable objects; and

delivering the set of signed reconstructable objects along with the one or more rules.

9. The computer-readable storage medium of claim 8, wherein the set of signed reconstructable objects is generated further based on the content.

10. The computer-readable storage medium of claim 9, wherein the inserting involves cryptographically signing the set of reconstructable objects.

11. The computer-readable storage medium of claim 10, wherein the cryptographically signing the set of reconstructable objects involves using the signing key to sign each reconstructable object or to sign the secure catalog.

12. The computer-readable storage medium of claim 8, the method further comprising:

extracting payloads and one or more signatures from the set of signed reconstructable objects; and

assembling the content using the payloads.

13. The computer-readable storage medium of claim 12, the method further comprising:

verifying the one or more signatures based on the signing key, wherein the extracting involves extracting the one or more signatures from each signed reconstructable object or from the secure catalog.

14. The computer-readable storage medium of claim 8, the method further comprising:

generating the secure catalog based on the rule that specifies how to generate the secure catalog.

15. A computer system, comprising:

a processor; and

a storage device that stores instructions that, when executed by the processor, cause the processor to perform a method including;

obtaining, by a computer, one or more rules of a group consisting of;

a rule that specifies how to chunk content to form a payload of a corresponding reconstructable object;

a rule that specifies a signing key;

a rule that specifies whether to include a secure catalog; and

a rule that specifies how to generate the secure catalog based on a set of reconstructable objects;

generating the set of reconstructable objects for the content based on the one or more rules;

inserting a signature into each reconstructable object or into the secure catalog to obtain a set of signed reconstructable objects; and

delivering the set of signed reconstructable objects along with the one or more rules.

16. The system of claim 15, wherein the set of signed reconstructable objects is generated further based on the content.

17. The system of claim 16, wherein the inserting involves cryptographically signing the set of reconstructable objects.

18. The system of claim 17, wherein the cryptographically signing the set of reconstructable objects involves using the signing key to sign each reconstructable object or to sign the secure catalog.

19. The system of claim 15, the method further comprising:

extracting payloads and one or more signatures from the set of signed reconstructable objects; and

assembling the content using the payloads.

20. The system of claim 19, the method further comprising:

verifying the one or more signatures based on the signing key, wherein the extracting involves extracting the one or more signatures from each signed reconstructable object or from the secure catalog.