Interoperable systems and methods for peer-to-peer service orchestration

• US 20050027871A1
• Filed: 06/07/2004
• Published: 02/03/2005
• Est. Priority Date: 06/05/2003
• Status: Active Grant

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Boccon-Gibod, Gilles, Bradley, William, Maher, David
• Granted Patent: US 8,234,387 B2
• Time in Patent Office: Days
• US Class Current: 709/227
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 21/1073 Conversion
• CPC Class Codes: G06F 21/1084 via third party
• CPC Class Codes: G06F 21/1085 Content sharing, e.g. peer-to-peer [P2P]
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 2220/10 Usage protection of distributed data files
• CPC Class Codes: G06Q 2220/18 Licensing
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/1061 using node-based peer discovery mechanisms static access to replicated servers H04L67/1006; service discovery H04L67/51
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0825 : using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0861 : Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/3263 : involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 : using challenge-response

Abstract

Systems and methods are described for performing policy-managed, peer-to-peer service orchestration in a manner that supports the formation of self-organizing service networks that enable rich media experiences. In one embodiment, services are distributed across peer-to-peer communicating nodes, and each node provides message routing and orchestration using a message pump and workflow collator. Distributed policy management of service interfaces helps to provide trust and security, supporting commercial exchange of value. Peer-to-peer messaging and workflow collation allow services to be dynamically created from a heterogeneous set of primitive services. The shared resources are services of many different types, using different service interface bindings beyond those typically supported in a web service deployments built on UDDI, SOAP, and WSDL. In a preferred embodiment, a media services framework is provided that enables nodes to find one another, interact, exchange value, and cooperate across tiers of networks from WANs to PANs.

Claims

1. A system for orchestrating services provided by network peers with sufficient interoperability to enable the exchange of value through participation in distributed applications, the system comprising:

a. a first service provider having a first service adaptation layer that exposes a first service interface which enables network peers to access, via a first discoverable binding, a first service offered by the first service provider;

b. a first service consumer having a first service access point that accesses the first service interface exposed by the first service provider, discovers the first binding and invokes the first service by using that binding; and

c. a first workflow collator that orchestrates the steps necessary to enable the first service provider to perform the first service for the first service consumer.

2. The system of claim 1 wherein the first service provides limited access to encrypted media content located on a remote Internet-based server, and the first workflow collator includes a first control program that verifies whether the first service consumer is authorized to access the content and, if so, locates the content and provides it to the first service consumer via the first service adaptation layer.

3. The system of claim 1 wherein the first service interface is specified in WSDL.

4. A system for orchestrating services provided by network peers, the system comprising:

a. a first service provider having a first service adaptation layer that exposes a first service interface which enables network peers to access, via a first discoverable binding, a first service offered by the first service provider;

b. a first service consumer having a first service access point that accesses the first service interface exposed by the first service provider, discovers the first binding and invokes the first service by using that binding;

c. a first workflow collator that orchestrates the steps necessary to enable the first service provider to perform the first service for the first service consumer; and

d. a second service provider having a second service adaptation layer that exposes a second service interface which enables network peers to access, via a second discoverable binding, a second service offered by the second service provider, the second service providing access to a service registry having a directory entry with information for locating and accessing the first service,

wherein the first service access point accesses the directory entry and uses the information to locate and invoke the first service.

5. The system of claim 4 wherein the service registry is a UDDI registry.

6. A system comprising:

p1 a. a first service provider having a first service adaptation layer that exposes a first service interface which enables network peers to access, via a first discoverable binding, a first service offered by the first service provider;

b. a first service consumer having a first service access point that accesses the first service interface exposed by the first service provider, discovers the first binding and invokes the first service by using that binding;

c. a first workflow collator that orchestrates the steps necessary to enable the first service provider to perform the first service for the first service consumer;

d. a trust management certificate for certifying the first service for access only by authorized service consumers; and

e. a control program for providing limited access to the first service using the trust management certificate,

wherein the first access point uses the trust management certificate to validate the first service consumer for authorized access to the first service.

7. The system of claim 6 wherein the trust management certificate is an X.509 certificate.

8. The system of claim 6 wherein the trust management certificate is an SSL certificate.

9. A method for orchestrating services provided by network peers with sufficient interoperability to enable the exchange of value through participation in distributed applications, the method comprising:

a. exposing, from a first service adaptation layer of a first service provider, a first service interface which enables network peers to access, via a first discoverable binding, a first service offered by the first service provider;

b. accessing, from a first service access point of a service consumer, the first service interface exposed by the first service provider, discovering the first binding and invoking the first service by using that binding; and

c. orchestrating, using a first workflow collator, the steps necessary to enable the first service provider to perform the first service for the first service consumer.

10. The method of claim 9 wherein the first service provides limited access to encrypted media content located on a remote Internet-based server, and the first workflow collator includes a first control program that verifies whether the first service consumer is authorized to access the content and, if so, locates the content and provides it to the first service consumer via the first service adaptation layer.

11. The method of claim 9 wherein the first service interface is specified in WSDL.

12. A method for orchestrating services, the method comprising:

a. exposing, from a first service adaptation layer of a first service provider, a first service interface which enables network peers to access, via a first discoverable binding, a first service offered by the first service provider;

b. accessing, from a first service access point of a service consumer, the first service interface exposed by the first service provider, discovering the first binding and invoking the first service by using that binding;

c. orchestrating, using a first workflow collator, the steps necessary to enable the first service provider to perform the first service for the first service consumer; and

d. exposing, from a second adaptation layer of a second service provider, a second service interface which enables network peers to access, via a second discoverable binding, a second service offered by the second service provider, the second service providing access to a service registry having a directory entry with information for locating and accessing the first service,

wherein the first service access point accesses the directory entry and uses the information to locate and invoke the first service.

13. The method of claim 12 wherein the service registry is a UDDI registry.

14. A method comprising:

a. exposing, from a first service adaptation layer of a first service provider, a first service interface which enables network peers to access, via a first discoverable binding, a first service offered by the first service provider;

b. accessing, from a first service access point of a service consumer, the first service interface exposed by the first service provider, discovering the first binding and invoking the first service by using that binding;

c. orchestrating, using a first workflow collator, the steps necessary to enable the first service provider to perform the first service for the first service consumer;

d. certifying the first service, using a trust management certificate, for access only by authorized service consumers; and

e. executing a control program to provide limited access to the first service using the trust management certificate,

wherein the first access point uses the trust management certificate to validate the first service consumer for authorized access to the first service.

15. The method of claim 14 wherein the trust management certificate is an X.509 certificate.

16. The method of claim 14 wherein the trust management certificate is an SSL certificate.

17. A method for orchestrating services, the method comprising:

a. accessing, from a first service access point of a service consumer, a first service interface exposed by a first service provider, the first service interface being operable to enable network peers to access, via a first discoverable binding, a first service offered by the first service provider;

b. discovering the first discoverable binding; and

c. invoking the first service by using that binding,

wherein the steps necessary to perform the first service are orchestrated using a first workflow collator.

18. The method of claim 17 wherein the first service provides limited access to encrypted media content located on a remote Internet-based server, and the first workflow collator includes a first control program that verifies whether the first service consumer is authorized to access the content and, if so, locates the content and provides it to the first service consumer via a first service adaptation layer.

19. A method comprising:

a. exposing, from a first service. adaptation layer of a first service provider, a first service interface which enables network peers to access, via a first discoverable binding, a first service offered by the first service provider;

b. receiving a request for the first service from a first service access point of a first service consumer; and

c. orchestrating, using a first workflow collator, the steps necessary to enable the first service provider to perform the first service for the first service consumer.

20. A method comprising:

a. exposing, from a first service adaptation layer of a first service provider, a first service interface which enables network peers to access, via a first discoverable binding, a first service offered by the first service provider;

b. receiving a request for the first service from a first service access point of a first service consumer;

c. certifying the first service, using a trust management certificate, for access only by authorized service consumers;

d. executing a control program to provide limited access to the first service using the trust management certificate; and

e. orchestrating, using a first workflow collator, the steps necessary to enable the first service provider to perform the first service for the first service consumer.