Proxy Entity Mediator for Secure Content Distribution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In content distribution networks, secure distribution of content is hindered when a certified origin entity delegates distribution to another network without sharing its private key, preventing the establishment of trust between the requesting entity and the intermediate distribution network.
Innovation Solution
A method where a content distribution entity requests a proxy entity to vouch for its integrity, allowing secure distribution without sharing the private key, and using a generation key to establish session keys for secure exchanges, ensuring confidentiality and transparency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a certified origin entity delegates distribution to another content distribution network, then distribution reach and efficiency are improved, but the ability to guarantee integrity and establish trust deteriorates because the private key cannot be shared
Solution Approach 1:
The patent introduces a proxy entity as an intermediary between the certified origin entity and the third-party content distribution network. The proxy entity holds the private key and performs cryptographic operations (signing generation keys, verifying certificates) on behalf of the origin entity. This mediator enables the origin entity to delegate distribution while maintaining integrity guarantees, as the proxy entity can prove the origin entity's authorization through digital signatures without revealing the private key.
2Reliability
If the private key is provided to the content distribution network for secure distribution, then authentication and integrity verification are improved, but security and confidentiality of the private key deteriorate
Solution Approach 1:
The patent extracts the private key from the content distribution network's operational scope and places it in the proxy entity. The content distribution network only receives public keys and signed generation keys, never the private key itself. This separation allows the network to perform authentication and integrity verification using the public key infrastructure while the private key remains securely confined to the proxy entity that needs it for cryptographic operations.
3Adaptability or versatility
If a third-party distribution network distributes content without the private key, then distribution flexibility and adaptability are improved, but the ability to establish trust and guarantee origin deteriorates
Solution Approach 1:
The proxy entity serves as a trusted intermediary that bridges the third-party distribution network and the certified origin entity. The proxy entity signs the generation key with the origin entity's private key, creating a digital signature that proves the content's origin. The third-party network can then distribute content flexibly using this signed generation key to establish secure sessions with clients, while the proxy entity maintains the trust relationship by verifying and signing cryptographic materials.
4Reliability
If the certified entity directly distributes content through its own network, then trust and integrity are maintained, but distribution reach and network utilization deteriorate
Solution Approach 1:
The proxy entity acts as a trusted intermediary that enables the certified origin entity to leverage third-party content distribution networks while maintaining trust relationships. The proxy entity holds the private key and performs cryptographic operations, allowing the origin entity to publish content to multiple networks through delegation. This extends the distribution reach beyond the origin entity's own network while the proxy entity ensures integrity through digital signatures.
Solution Approach 2:
The proxy entity provides universal functionality across multiple content distribution networks. A single proxy entity can serve multiple origin entities and work with multiple third-party networks, creating a scalable architecture. The proxy entity's ability to sign generation keys and verify certificates makes it universally applicable across different networks and origin entities, enabling widespread distribution while maintaining centralized trust management.
Data Source
Figure 1a~1b
Figure 2~3
Figure 4a
AI summary
A method for distributing a piece of content in a content distribution network, provided by a source entity of which the integrity is ensured by means of a private key, said method comprising the following steps implemented by a content distribution entity: - receiving a request to access said piece of content from a user device; - sending, to a proxy entity, a request to have at least one piece of data signed by means of the private key; - receiving said at least one piece of signed data, said at least one piece of signed data certifying the integrity of said distribution entity for the user device; - sending a public key associated with the private key to the user device; - sending said at least one piece of signed data to the user device and distributing the content to the user device.