Trusted communication session and content delivery

• US 10,742,643 B2
• Filed: 12/11/2018
• Issued: 08/11/2020
• Est. Priority Date: 11/14/2013
• Status: Active Grant

• Current Assignee: Comcast Cable Communications LLC (Comcast Corporation)
• Original Assignee: Comcast Cable Communications LLC (Comcast Corporation)
• Inventors: Moore, Jonathan
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US16/216,623
• Publication Number:
  US 20190281039A1
• Time in Patent Office: 609 Days
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 2209/64 Self-signed certificates
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

Methods and systems for network communication are disclosed. Proxy information may be received. The proxy information may facilitate a gateway device communicating as a proxy for a user device.

Claims

1. A method comprising:

receiving, by a gateway device from a user device, an encryption key and a request for content, wherein the encryption key indicates that the user device is associated with the gateway device, and wherein the content is associated with a requirement;

modifying the request for the content to indicate that the request for the content originated from the gateway device;

sending, to a content server, the encryption key and the modified request for the content;

receiving, based on the encryption key and based on the gateway device satisfying the requirement, the requested content; and

sending, to the user device, the requested content.

2. The method of claim 1, wherein the requirement comprises a geographic requirement that prevents the content from being received if the geographic requirement is not satisfied, and wherein satisfaction of the geographic requirement comprises the gateway device being located at a known location.

3. The method of claim 1, wherein the gateway device is configured as a proxy for the user device.

4. The method of claim 1, further comprising:

receiving, from the user device, a pairing request;

sending, to the content server based on the pairing request, a certificate signing request and a first token; and

sending, to the user device, a second token, wherein the second token facilitates the gateway device communicating as a proxy for the user device.

5. The method of claim 4, wherein the encryption key comprises a public encryption key, and wherein at least one of the first token or the second token is configured to expire after a time period.

6. The method of claim 1, further comprising receiving, from the user device, a communication session request comprising authentication information for a user associated with the user device.

7. The method of claim 1, further comprising receiving the encryption key and the request for the content from an application associated with the user device.

8. An apparatus comprising:

one or more processors; and

memory storing processor executable instructions that, when executed by the one or more processors, cause the apparatus to;

receive, from a user device, an encryption key and a request for content, wherein the encryption key indicates that the user device is associated with the apparatus, and wherein the content is associated with a requirement;

modify the request for the content to indicate that the request for the content originated from the apparatus;

send, to a content server, the encryption key and the modified request for the content;

receive, based on the encryption key and based on the apparatus satisfying the requirement, the requested content; and

send, to the user device, the requested content.

9. The apparatus of claim 8, wherein the requirement comprises a geographic requirement that prevents the content from being received if the geographic requirement is not satisfied, and wherein satisfaction of the geographic requirement comprises the apparatus being located at a known location.

10. The apparatus of claim 8, wherein the apparatus is configured as a proxy for the user device.

11. The apparatus of claim 8, wherein the processor executable instructions, when executed by the one or more processors, further cause the apparatus to:

receive, from the user device, a pairing request;

send, to the content server based on receiving the pairing request, a certificate signing request and a first token; and

send, to the user device, a second token, wherein the second token facilitates the apparatus communicating as a proxy for the user device.

12. The apparatus of claim 11, wherein the encryption key comprises a public encryption key, and wherein at least one of the first token or the second token is configured to expire after a time period.

13. The apparatus of claim 8, wherein the processor executable instructions, when executed by the one or more processors, further cause the apparatus to receive, from the user device, a communication session request comprising authentication information for a user associated with the user device.

14. The apparatus of claim 8, wherein the processor executable instructions, when executed by the one or more processors, further cause the apparatus to receive the encryption key and the request for the content from an application associated with the user device.

15. One or more non-transitory computer readable media storing processor executable instructions that, when executed by at least one processor, cause the at least one processor to:

receive, from a user device, an encryption key and a request for content, wherein the encryption key indicates that the user device is associated with a gateway device, and wherein the content is associated with a requirement;

modify the request for the content to indicate that the request for the content originated from the gateway device;

send, to a content server, the encryption key and the modified request for the content;

receive, based on the encryption key and based on the gateway device satisfying the requirement, the requested content; and

send, to the user device, the requested content.

16. The one or more non-transitory computer readable media of claim 15, wherein the requirement comprises a geographic requirement that prevents the content from being received if the geographic requirement is not satisfied, and wherein satisfaction of the geographic requirement comprises the gateway device being located at a known location.

17. The one or more non-transitory computer readable media of claim 15, wherein the gateway device is configured as a proxy for the user device.

18. The one or more non-transitory computer readable media of claim 15, wherein the processor executable instructions, when executed by the at least one processor, further cause the at least one processor to:

receive, from the user device, a pairing request;

send, to the content server based on receiving the pairing request, a certificate signing request and a first token; and

send, to the user device, a second token, wherein the second token facilitates the gateway device communicating as a proxy for the user device.

19. The one or more non-transitory computer readable media of claim 15, wherein the processor executable instructions, when executed by the at least one processor, further cause the at least one processor to receive, from the user device, a communication session request comprising authentication information for a user associated with the user device.

20. The one or more non-transitory computer readable media of claim 15, wherein the processor executable instructions, when executed by the at least one processor, further cause receiving the encryption key and the request for the content from an application associated with the user device.