Authentication Code Verification for TTL Control in Content Delivery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing content delivery systems are vulnerable to fraudulent manipulation of TTL values, allowing content to be delivered to unspecified numbers of persons due to ease of modification on general-purpose OS devices like personal computers, which undermines the limitation of the number of routers through which content can pass.
Innovation Solution
A content transmission control device that verifies authentication codes for the number of content transmissions and updates them, generating a new authentication code to prevent falsification by including an authentication code in the packet header, ensuring that only authorized devices can modify the TTL value and limit the delivery range of content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TTL values are used to limit the number of routers content can pass through, then the delivery range of content can be controlled, but the system becomes vulnerable to fraudulent manipulation of TTL values by devices running general-purpose OS
Solution Approach 1:
The patent introduces an authentication code as an intermediary mechanism between the TTL value and the packet header. This authentication code acts as a mediator that verifies the integrity and authenticity of the TTL value, preventing fraudulent manipulation while maintaining the ability to control content delivery range through TTL.
Solution Approach 2:
The patent implements a feedback mechanism where the authentication code is generated based on the TTL value and packet header information, then verified by the receiving device. This feedback loop ensures that any modification to the TTL value or packet header will be detected, maintaining reliable control over content delivery while preventing fraud.
2Reliability
If authentication codes are added to verify TTL values, then fraudulent manipulation can be prevented, but the device complexity increases
Solution Approach 1:
The patent merges the authentication code with the existing packet header structure, combining the TTL verification function with the existing packet processing flow. This integration minimizes additional complexity by utilizing existing hardware and software frameworks for packet handling, while still providing robust authentication.
Solution Approach 2:
The patent changes the parameter state by introducing an authentication code field to the packet header, transforming the simple TTL value into an authenticated TTL structure. This parameter change enables verification functionality without fundamentally altering the packet processing architecture, thus managing complexity while improving reliability.
Data Source
AI summary
A delivery of content to the unspecified number of persons is prevented by limiting the content delivery range. A delivery source terminal 110 generates an authentication code based on the number of possible transmission times of content and an authentication code key 116, and configures the number of possible transmission times and the generated authentication code in a packet. The delivery source terminal 110 transmits the packet to a delivery destination terminal 130. A router 120 verifies whether the authentication code generated based on the number of possible transmission times and the authentication code key 124 that are received agrees with the authentication code received from the delivery source terminal 110, updates the number of possible transmission times when the two codes agree, generates a new authentication code, and configures it in the packet. The router 120 transmits the packet thus generated to the delivery destination terminal 130.