Discovery, access control, and communication with networked services

• US 9,986,279 B2
• Filed: 02/01/2016
• Issued: 05/29/2018
• Est. Priority Date: 11/26/2008
• Status: Active Grant

• Current Assignee: Samba TV Incorporated
• Original Assignee: Free Stream Media Corporation
• Inventors: Harrison, David
• Primary Examiner(s): Flynn, Nathan
• Assistant Examiner(s): KURIEN, CHRISTEN A
• Application Number:
  US15/011,696
• Publication Number:
  US 20160227265A1
• Time in Patent Office: 848 Days
• Field of Search: None
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06F 9/46 Multiprogramming arrangements
• CPC Class Codes: G08C 17/02 using a radio link
• CPC Class Codes: H04L 12/1859 adapted to provide push services, e.g. data channels
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 65/00 Network arrangements, protocols or services for supporting real-time applications in data packet communication real-time or near real-time messaging, e.g. instant messaging [IM] H04L51/04; selective video distribution H04N21/00
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/55 Push-based network services
• CPC Class Codes: H04N 21/23424 involving splicing one content stream with another content stream, e.g. for inserting or substituting an advertisement
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/2668 Creating a channel for a dedicated end-user group, e.g. insertion of targeted commercials based on end-user profiles information retrieval from the Internet by querying with filtering and personalisation G06F16/9535; arrangements for replacing or switching information during the broadcast H04H20/10; push services over packet-switching network H04L12/1859; adaptation of message content in packet-switching networks H04L51/063
• CPC Class Codes: H04N 21/41265 having a remote control device for bidirectional communication between the remote control device and client device unidirectional remote control device H04N21/42204
• CPC Class Codes: H04N 21/4147 PVR [Personal Video Recorder] H04N5/76 takes precedence ; arrangements for broadcast with accumulation-type receivers H04H20/40
• CPC Class Codes: H04N 21/435 Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4516 involving client characteristics, e.g. Set-Top-Box type, software version or amount of memory available
• CPC Class Codes: H04N 21/6175 involving transmission via Internet broadcast-related systems characterised by the transmission system being the Internet H04H60/82
• CPC Class Codes: H04N 21/6405 Multicasting data broadcast and multicast in packet switching networks H04L12/18
• CPC Class Codes: H04N 21/64322 : IP
• CPC Class Codes: H04N 21/812 : involving advertisement data advertising per se G06Q30/02
• CPC Class Codes: H04N 21/8352 : involving content or source identification data, e.g. Unique Material Identifier [UMID]

Abstract

Particular embodiments permit a computer program running within a security sandbox to discover and communicate with networked services for example print servers, or remote control programming interfaces for TVs, stereos, and game boxes. The sandbox allows the computer program to originate unicast connections to a limited set of hosts but otherwise provides no access to the network. Particular embodiments may require no prior install, zero configuration, no account names or passwords, and yet resists spam. This is achieved by using centralized global infrastructure to coordinate the communications rather than local multicast, anycast, or datalink broadcast.

Claims

1. A system comprising:

a television executing a discoverable service thereon to provide a communication;

a device residing in a same private network of Internet as the television, the device executing a sandboxed program thereon, and the device configured to use a pseudonym of a user and to call a discovery agent to find the discoverable service of the television within the same private network,

wherein the pseudonym of the user is a hardware address of a node of the sandboxed program within the same private network, and

wherein the device and the television are associated using at least the communication from the discoverable service within the same private network, the communication comprising an announcement of the discoverable service to a discovery service;

a server executing the discovery service thereon to;

receive the announcement of the discoverable service,

translate, through a network address translator straddling both a public network and the same private network of the Internet, a private address of a message related to the announcement of the discoverable service to a public address thereof,

perform, through the discovery service, a lookup based on the public address of the message to determine at least one device comprising the television assumed to be in the same private network as the sandboxed program in accordance with the public address being shared therebetween,

respond, in accordance with the determination of the shared public address, with service information of the television obtainable through the sandboxed program, the service information comprising a globally unique identification (GUID) and a human-friendly name of the television, and

forward, through the discovery service, a desired payload to the discoverable service of the television based on the sandboxed program obtaining the service information to communicate with the GUID of the discoverable service of the television through the network address translator to the discovery service; and

a targeting system to;

receive the pseudonym,

identify the user of the device using the pseudonym, and

target advertising to the identified user of the device using at least one of the sandboxed program and the discoverable service.

2. The system in claim 1, wherein the discovery service of the server is further configured to:

determine that the discoverable service of the television is available, and

reply to a query from any of the device, the targeting system and another device to find the discoverable service of the television.

3. The system in claim 1,

wherein the communication of the television comprises at least one of the GUID, the human-friendly name, a private address data and a public address data of the discoverable service.

4. The system in claim 3, wherein the public address data is provided by the network address translator.

5. The system in claim 1, wherein:

the pseudonym of the user is a long-term unique identifier of the sandboxed program of the device that is unlikely to change.

6. The system in claim 1,

wherein the device is further configured to:

construct a security sandbox with an associated constrained runtime environment, and

execute the sandboxed program in the associated constrained runtime environment of the security sandbox.

7. The system in claim 1, further comprising:

a media device to send a video to at least one of the television and the device within a home of the user without requiring user configuration and account registration.

8. The system in claim 6, wherein the sandboxed program is at least one of an embedded object, a script, a binary executable, an intermediate bytecode, an abstract syntax tree, and anything that can be executed with an appropriate runtime environment.

9. The system in claim 1, wherein:

a media payload is communicated between the server and the sandboxed program of the device.

10. A system comprising:

a television executing a discoverable service thereon to provide a communication;

a device residing in a same private network of Internet as the television, and executing a sandboxed program thereon to use a pseudonym of a user and to call a discovery agent to find the discoverable service,

wherein the pseudonym of the user is a hardware address of a node of the sandboxed program within the same private network, and

wherein the device and the television are associated using at least the communication from the discoverable service within the same private network, the communication comprising an announcement of the discoverable service to a discovery service;

a server executing the discovery service thereon to;

receive the announcement of the discoverable service,

translate, through a network address translator straddling both a public network and the same private network of the Internet, a private address of a message related to the announcement of the discoverable service to a public address thereof,

perform, through the discovery service, a lookup based on the public address of the message to determine at least one device comprising the television assumed to be in the same private network as the sandboxed program in accordance with the public address being shared therebetween,

respond, in accordance with the determination of the shared public address, with service information of the television obtainable through the sandboxed program, the service information comprising a GUID and a human-friendly name of the television, and

forward, through the discovery service, a desired payload to the discoverable service of the television based on the sandboxed program obtaining the service information to communicate with the GUID of the discoverable service of the television through the network address translator to the discovery service; and

a targeting system to;

receive the pseudonym,

identify the user of the device using the pseudonym, and

target advertising to the identified user of the device.

11. The system of claim 10, wherein the discovery service of the server is further configured to:

determine that the discoverable service of the television is available, and

reply to queries from at least one of the device and the targeting system to find the discoverable service of the television.

12. The system in claim 10,

wherein the communication of the television comprises at least one of the GUID, the human-friendly name, a private address data and a public address data of the discoverable service.

13. The system in claim 10,

wherein the pseudonym of the user is a long-term unique identifier of the sandboxed program of the device that is unlikely to change.

14. The system in claim 10,

wherein the device is further configured to:

construct a security sandbox with an associated constrained runtime environment, and

execute the sandboxed program in the associated constrained runtime environment of the security sandbox, and

wherein the sandboxed program of the device is at least one of an embedded object, a script, a binary executable, an intermediate bytecode, an abstract syntax tree, and anything that can be executed with an appropriate runtime environment.

15. The system in claim 10, further comprising:

a media device to send a video to at least one of the television and the device within a home of the user without requiring user configuration and account registration.

16. The system in claim 10, wherein:

a media payload is communicated between the server and the discoverable service of the television.

17. The system in claim 12, wherein the public address data is provided by the network address translator.

18. A method comprising:

initiating a discoverable service executing on a television to provide a communication;

executing a sandboxed program on a device residing in a same private network of Internet as the television to use a pseudonym of a user and to call a discovery agent to find the discoverable service of the television within the same private network,

wherein the pseudonym of the user is a hardware address of a node of the sandboxed program within the same private network, and

wherein the device and the television are associated using at least the communication from the discoverable service within the same private network, the communication comprising an announcement of the discoverable service to a discovery service;

receiving, through a server executing the discovery service thereon, the announcement of the discoverable service;

translating, through a network address translator straddling both a public network and the same private network of the Internet, a private address of a message related to the announcement of the discoverable service to a public address thereof;

performing, through the discovery service, a lookup based on the public address of the message to determine at least one device comprising the television assumed to be in the same private network as the sandboxed program in accordance with the public address being shared therebetween;

responding, in accordance with the determination of the shared public address, with service information of the television obtainable through the sandboxed program, the service information comprising a GUID and a human-friendly name of the television;

forwarding, through the discovery service, a desired payload to the discoverable service of the television based on the sandboxed program obtaining the service information to communicate with the GUID of the discoverable service of the television through the network address translator to the discovery service;

receiving the pseudonym from the sandboxed program using a targeting system;

identifying, through the targeting system, the user of the device using the pseudonym; and

targeting, through the targeting system, an advertisement to the identified user of the device using at least one of the sandboxed program and the discoverable service.

19. The method of claim 18, further comprising:

determining, through the discovery service, that the discoverable service of the television is available; and

replying, through the discovery service, to a query from at least one of the device and the targeting system to discover the discoverable service of the television.

20. The method in claim 18,

wherein the communication of the television comprises at least one of the GUID, the human-friendly name, a private address data and a public address data of the discoverable service.

21. The method in claim 20, comprising providing, through the network address translator, the public address data.

22. The method in claim 18, further comprising:

constructing a security sandbox with an associated constrained runtime environment in the device; and

executing the sandboxed program in the associated constrained runtime environment of the security sandbox,

wherein the sandboxed program of the device is at least one of an embedded object, a script, a binary executable, an intermediate bytecode, an abstract syntax tree, and anything that can be executed with an appropriate runtime environment.

23. The method in claim 18, further comprising:

sending, through a media device, a video to at least one of the television and the device within a home of the user without requiring user configuration and account registration.

24. The method in claim 18,

wherein the pseudonym of the user is a long-term unique identifier of the sandboxed program of the device that is unlikely to change.

25. The method in claim 18, comprising:

communicating a media payload between the server and the sandboxed program of the device.