Peer-to-Peer Media Sharing Access Control via Centralized DRM

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Traditional peer-to-peer content sharing systems lack effective access control mechanisms, leading to unrestricted reproduction and access issues, particularly in environments with limited or no internet connectivity, making it difficult to manage and monitor the use of copyrighted media items.

Innovation Solution

A peer-to-peer sharing system integrated with a centralized access control mechanism that uses encryption and digital rights management (DRM) to manage access to media items, where user devices encrypt and wrap keys using a media server's public key, allowing only authorized devices to play encrypted media items after verifying with the media server.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If peer-to-peer content sharing is implemented without centralized access control, then bandwidth requirements are reduced and access is improved, but security and access management deteriorate

Engineering Contradiction:
Improveaccess to media itemsVSAvoidaccess control
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a media server as an intermediary that performs centralized access control checks even in peer-to-peer sharing scenarios. When a user device receives encrypted media from another user device, it must contact the media server to verify playback rights and obtain decryption keys. This mediator approach enables secure access control without preventing peer-to-peer content transfer, resolving the contradiction between ease of access and security management.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If encryption and digital rights management are implemented, then security and control are improved, but device complexity increases

Engineering Contradiction:
Improvesecurity controlVSAvoidencryption operations
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the complex encryption and decryption operations from the user devices and centralizes them on the media server. User devices only need to perform simple operations like receiving encrypted content and contacting the server for key verification. The server handles the computationally intensive cryptographic operations, including verifying digital rights and managing key distribution. This extraction reduces device complexity while maintaining strong security controls.

Inventive Principle:
Principle #2Taking out (Extraction)

3Loss of energy

If peer-to-peer sharing is used in areas with limited internet access, then bandwidth requirements are reduced, but access control and verification become difficult

Engineering Contradiction:
Improvebandwidth consumptionVSAvoidauthorization verification
Core Design Contradiction:
Loss of energyVSReliability

Solution Approach 1:

The patent implements preliminary authorization verification where user devices contact the media server before receiving encrypted media content through peer-to-peer connections. The server performs access control checks and provides authorization tokens in advance. This preliminary action ensures that even when devices are in areas with limited internet access, the authorization verification has already been completed, maintaining reliability without requiring continuous connectivity during the actual content transfer.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11025432B2Access control technology for peer-to-peer sharing
Publication Date: 2021.06.01 GOOGLE LLC
  • US11025432B2 patent drawing
  • US11025432B2 patent drawing
  • US11025432B2 patent drawing

AI summary

Implementations disclose an access control mechanism for peer-to-peer sharing technology. A method includes receiving, by a processing device of a first user device, an encrypted media item and a wrapped key from a second user device, wherein the wrapped key comprises content masked from the first user device; transmitting, by the first user device, the wrapped key and a request to a media server to determine whether the first user device is authorized to play the encrypted media item; receiving, from the media server, a response indicating the first user device is authorized to play the encrypted media item, the response comprising a cryptographic key derived from the wrapped key; and decrypting the encrypted media item using the cryptographic key.