Sanction Server for Secure Content Distribution Rights

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional cryptographic methods for secure content distribution in cloud computing environments lack effective mechanisms to enforce ownership and distribution rights, particularly in scenarios where multiple parties are involved, and there is a need for secure, scalable, and centralized management of cryptographic transactions.

Innovation Solution

The implementation of a cryptographic sanctioning system that involves a sanctioning authority to authorize cryptographic operations between clients and servers, using RSA or ECC algorithms to generate and manage scrambling control words, ensuring secure content delivery while maintaining ownership and distribution rights, even when the caching server does not have direct access to the clear content.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional cryptographic methods are used for secure content distribution, then data confidentiality and integrity are maintained, but effective enforcement of ownership and distribution rights is lacking

Engineering Contradiction:
Improveownership and distribution rights enforcementVSAvoidcryptographic transaction management
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a sanctioning authority as an intermediary that issues cryptographic sanctions enabling or disabling cryptographic operations. This mediator enforces ownership and distribution rights by controlling whether cryptographic operations can proceed, without requiring the sanctioning authority to directly manage all cryptographic transactions between content providers and consumers.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system segments cryptographic transaction management into separate functional components: the sanctioning authority that issues sanctions, the content provider that uses sanctions to control content, and the consumer that receives sanctions. This segmentation allows each party to have specialized responsibilities, improving rights enforcement while reducing overall system complexity.

Inventive Principle:
Principle #1Segmentation

2Productivity

If a caching server is used to store scrambled content, then content delivery scalability is improved, but direct access to clear content for cryptographic operations is lost

Engineering Contradiction:
Improvecontent delivery scalabilityVSAvoidcryptographic operation execution
Core Design Contradiction:
ProductivityVSEase of operation

Solution Approach 1:

The sanctioning authority issues cryptographic sanctions in advance to both the content provider and consumer before content delivery occurs. These pre-issued sanctions contain all necessary cryptographic parameters, allowing the caching server to perform cryptographic operations on scrambled content without needing access to clear content or requiring real-time intervention from the sanctioning authority.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system uses cryptographic sanctions as reusable copies of authorization that can be independently executed by the caching server. Instead of requiring the sanctioning authority to directly control each cryptographic operation, the authority creates sanction copies that can be executed autonomously by the content provider and consumer, enabling scalable content delivery while maintaining cryptographic security.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS8565420B2Source centric sanction server and methods for use therewith
Publication Date: 2013.10.22 BITHARMONY LLC
  • US8565420B2 patent drawing
  • US8565420B2 patent drawing
  • US8565420B2 patent drawing

AI summary

A sanction server includes a network interface that receives proxy data from a content source that includes cryptographic parameters that are based on a scrambling control word used to scramble the media content, receives a request for the media content from a client device, transmits the proxy data to the client device and transmits notification data to a caching server. The content source generates cryptographic data and sends the cryptographic data and the scrambled media content to the caching server. The caching server forwards the cryptographic data and the scrambled media content to the client device. The client device generates the scrambling control word for descrambling the scrambled media content based on the proxy data and the cryptographic data.