Filter for a distributed network

Abstract

A device coupled to a network receives a request from an indexing node in the network, the request corresponding to a particular data item; and provides a response to the indexing node in response to the request, wherein the response to the indexing node includes an indication that the indexing node should index a substitute data item instead of the particular data item.

Description

NOTICE OF COPYRIGHTS AND TRADE DRESS

A portion of the disclosure of this patent document contains material which is subject to copyright protection. This patent document may show and/or describe matter which is or may become trade dress of the owner. The copyright and trade dress owner has no objection to the facsimile reproduction by anyone of the patent disclosure as it appears in the Patent and Trademark Office patent files or records, but otherwise reserves all copyright and trade dress rights whatsoever.

BACKGROUND

1. Field of the Invention

This disclosure relates to peer-to-peer networks and the filtering of information available for storage on peer-to-peer networks.

2. Related Art

Peer-to-peer networks are an autonomous network of computers that communicate with one another. Users of peer-to-peer networks make their files available for sharing by advertising available files, that is, broadcasting the availability of the files to peers and by allowing downloads of available files by peers on the network. Peer-to-peer networks may contain a broad variety of content, the distribution of which may infringe the copyright of the owner of the content. Content may include music, photographs, books, magazines, movies, televisions shows, and other works which may be protected by copyright laws. Example peer-to-peer networks include FastTrack, eDonkey, Gnutella and BitTorrent. As peer-to-peer networks proliferate, copyright holders seek the means to remove infringing material availability on peer-to-peer networks.

For centralized networks an index of available content is held in a central database, and all searches for available content on the network are conducted through the central database. As such, the central database may identify and remove infringing content. However, for decentralized peer-to-peer networks, there is no central database of available content. Peer-to-peer networks provide a distributed, ad hoc indexing function. The indexing function is distributed in that typically no one node on the network contains a copy of the entire list of content that is available on the network. Instead, hundreds, thousands or even millions of nodes contain small indexes, each containing a subset of the total available content. The index functionality is ad hoc in the sense that indexing nodes may go offline or come online at any time, and that any particular node may or may not be capable of providing indexing functionality.

The unruly group of distributed ad hoc indexing nodes that provide the content on peer-to-peer networks has been viewed by some as uncontrollable, in that there has been no successfully widely deployed technique to prevent the distribution of copyright infringing content. Content owners and technology companies have focused their efforts on filtering content from peer-to-peer networks using two techniques. These two techniques are referred to herein as “point of search/download solutions” and “point of sharing solutions.”

A. Point of Search/Download Solutions

Point of search/download solutions attempt to filter out infringing content from being displayed in search results at the peer-to-peer network user's computer. An example point of search/download solution may perform the following actions:

• • 1. User A initiates a peer-to-peer search for a file having a specified keyword by using a peer-to-peer application on user A's computer to contact other nodes on the peer-to-peer network requesting search a list of available files which match the keyword.
  • 2. If any matching files are found, search results containing information about those files (which may be or include“metadata”) is returned to User A's peer-to-peer application.
  • 3. Before displaying the search results, User A's peer-to-peer application may evaluate whether the search results include links to infringing content. For example, User A's peer-to-peer application may contain a filter list of keywords representing infringing content, such as names of artists whose works are owned by a particular copyright holder. When the search results contain one or more keywords included in a filter list, the peer-to-peer application may block the matching search result from being displayed. Or, for example, User A's peer-to-peer application may contact a server to learn whether the search results contain any infringing content.

A point of search/download solution removes search results and/or the ability to download infringing content by filtering out (that is, removing) from those results infringing entries so that infringing content is not displayed to the user in response to a search by that user.

Point of search/download solutions have numerous and obvious problems, including the following: a) A filter list of all infringing content must be distributed to the computer of every user on the network. b) Every node on the network may be required to check with a filter server to evaluate the search results before displaying the search results to the user. c) To achieve a) and b) requires that the filter server have enormous bandwidth and processing capacities which causes the point of search/download solution to be very expensive to run. d) There are privacy issues that may arise if users' search queries and/or search results are passed to a filter server. The owners of the filter server and/or the government authorities may inspect the search results and, by correlating those search requests and/or results with users' IP addresses, may monitor the behavior of users in a way that falls outside of their mandate of preventing the distribution of selected copyright infringing works. For example, a government authority in a repressive country may use such means to charge a particular user on the network with searching for homosexual content, or for searching for information on freedom charters, etc. e) Finally, any user who obtains a hacked version of the peer-to-peer application—i.e. a version of the peer-to-peer application where the filtering function has been removed or circumvented—may be able to obtain unfiltered search results. There is therefore a direct and obvious motive for hackers to attempt to create such a derivative unfiltered product and for users to download such a product en masse. In other words, shortly after the product has been hacked, as it inevitably would be, any user who wishes to obtain access to infringing content, or who wishes to avoid the privacy concerns outlined above, will replace their existing filtered version of the peer-to-peer application software with the hacked version. As a result of these problems, a point of search/download solution has no or limited success as a tool for preventing distribution of infringing content on peer-to-peer networks.

B. Point of Sharing Solutions

Point of sharing solutions provide another approach. Instead of trying to filter incoming search results on a user's personal computer, a point of sharing solution tries to prevent a user from sharing infringing files. That is, the point of sharing solutions block infringing files from being made available on the network by a given user, so that infringing files will not appear as a search result to users. Stated another way, point of sharing solutions prohibit peer-to-peer applications from advertising infringing content. However, to achieve this, as with point of search/download solutions, each computer must keep a large filter list or check with a server before advertising a particular file.

Point of sharing solutions suffer similar problems as point of search/download solutions, including: a) Requiring a filter server to handle a large amount of network traffic to evaluate advertised files before they are shared. b) High operating costs caused by the network traffic of a). b) Privacy issues like those described above, at least as great as those outlined above, and possibly greater, because the central authority now potentially has knowledge of each file shared by every user on the network. c) The incentive to create a hacked version of the peer-to-peer application is a little less than for the point of search/download solution, because there is little to be gained by using a hacked version. d) However, if even, say, 10% of users make use of a hacked version of the client peer-to-peer application and are able to share infringing content, then the content may become readily available on the network. As such, point of sharing solutions have no or limited success as a tool for preventing distribution of infringing content on a peer-to-peer network.

DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram of an environment in which the filter for a distributed network may be implemented as described herein.

FIG. 2 is a block diagram of a server and a client in which the filter for a distributed network may be implemented as described herein.

FIG. 3 is a block diagram of a network in which the filter for a distributed network may be implemented as described herein.

FIG. 4 is a block diagram of a network having a server, indexing nodes, and ordinary nodes in which the filter for a distributed network described herein may be implemented.

FIG. 5 is a flow chart of an overview of the actions taken to implement an embodiment of the filter for a distributed network described herein.

FIG. 6 is a flow chart of the actions taken to implement a first embodiment of the filter for a distributed network described herein.

FIG. 7 is a flow chart of the actions taken to implement a second embodiment of the filter for a distributed network described herein.

DETAILED DESCRIPTION

Throughout this description, the embodiments and examples shown should be considered as exemplars, rather than limitations on the apparatus and methods disclosed or claimed.

A server may implement a filter, which may be referred to as a point of indexing filter, to remove copyright infringing files and/or non-desirable files from a network, including peer-to-peer networks. The server implementing the filter may also replace copyright infringing files with alternate approved legal versions of the files. A system and method may achieve this filter by using indexing nodes on a peer-to-peer network to contact a server for authorization to index file entries that are advertised to indexing nodes by ordinary nodes connected to the indexing node. The system and method may also replace advertised file entries with alternate versions.

System

Referring now to FIG. 1, there is shown a block diagram of an environment 100 in which the filter for a distributed network may be implemented as described herein. In the environment 100, multiple client devices 112 may be coupled with and communicate over network 104 with other client devices 112 and with one or more servers 110.

A client device 112 may include software and/or hardware for providing the functionality and features described herein. A client device 112 may include or have stored thereon or therein peer-to-peer software that allows the client device 112 to function as a node on a peer-to-peer network, as described herein. A client device 112 may be a computing device. A computing device as used herein refers to a device with a processor, memory and a storage device that may execute instructions. The term computing device includes, but is not limited to, personal computers 120, server computers 110, computing tablets, set top boxes, video game systems, personal video recorders, telephones, cellular telephones 134, digital telephones, personal digital assistants (PDAs) 132, portable computers, notebook computers 130, and laptop computers. These computing devices may run an operating system, including, for example, variations of the Linux, Unix, MS-DOS, Microsoft Windows, Palm OS, and Apple Mac OS X operating systems.

The techniques described herein may be implemented in software stored on storage media accessible either directly or via a storage device included with or otherwise coupled or attached to a computing device. These storage media include, for example, magnetic media such as hard disks, floppy disks and tape; optical media such as compact disks (CD-ROM and CD-RW) and digital versatile disks (DVD and DVD±RW); flash memory cards; and other storage media. As used herein, a storage device is a device that allows for reading and/or writing to a storage medium. Storage devices include, hard disk drives, DVD drives, flash memory devices (such as readers and writers), and others.

A client device 112 may include one or more of each of: logic arrays, memories, analog circuits, digital circuits, software, firmware, and processors such as microprocessors, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), programmable logic devices (PLDs) and programmable logic arrays (PLAs). The hardware and firmware components of the client devices 112 may include various specialized units, circuits, software and interfaces for providing the functionality and features described here. The processes, functionality and features may be embodied in whole or in part in software which operates on a client device 112 and may be in the form of, for example, firmware, an application program, an applet (e.g., a Java applet), a browser plug-in, a COM object, a dynamic linked library (DLL), a script, one or more subroutines, an operating system component or service, and/or a combination thereof

Client devices 112 typically include a display, user input devices, and a storage media and storage device. For example, when the client device 112 is a personal computer 120, the personal computer 120 includes a display 128, a keyboard 124, a mouse 126 and a hard disk drive 122.

A server 110 is another computing device and refers to a device with a processor, memory and a storage device, and may execute instructions. A server is typically more robust than a client device and typically has greater processing capabilities, greater network throughput, and/or greater storage space when compared to a personal computer or other client device. Although shown as a single server, server 110 may be a server farm, group of servers (including application servers, database servers, content servers, and others), and may include a firewall, load balancer, and other network devices; and may include multiple devices in multiple locations. The server 110 may provide one or more database and other facilities to receive index requests and provide index responses as described herein.

In one embodiment, network 104 is the Internet. Network 104 may support various versions of the Ethernet protocol and other data and/or voice communications protocols. The client devices 112 and server 110 may communicate over the network 104 via wired and/or wireless communications. The client devices 112 and server 110 communicate data units over the network 104. As used herein, a data unit refers to a frame, cell, datagram, packet or other unit of information. The communications between the client devices 112 and the server 110 are pertinent to the techniques, features and functionality described herein.

FIG. 2 is a block diagram of a server 110 and a client device 112 in which the filter for a distributed network may be implemented as described herein. To achieve the methods described herein in more detail below, server 110 may include typical server software such as, for example, an operating system and communications software, and, additionally: an administration interface 212, a search engine interface 214, a web services interface 216, a server connector module 218, and a database 220. Generally, the server 110 may contain or have access to the database 220.

As will be described in more detail below, the server 110 receives communications from client devices 112 acting as indexing nodes inquiring about files being advertised to the client devices 112 acting as indexing nodes by ordinary nodes—namely, index requests—and sends communications to the indexing nodes in response to the indexing nodes—namely, index responses. In one embodiment, the communications between the server 110 and client device 112 via server connector module 218 and client connector module 230 are encrypted and/or digitally signed. The encryption may prevent third parties on the network from obtaining access to the information in the communications between the server 110 and the client device 112. Other techniques for secure communication between the server 110 and the client device 112 may also be implemented.

The administration interface 212 may allow content filter partners and other participants in the filtering system to log in and add or edit entries for files that are to be filtered from the network. The administration interface 212 may be web-based such that it provides an interface for partners/participants to access the server 110 through a web browser. The communications between the administration interface 212 of server 110 with partners and participants via a web browser may be made secure via secure sockets layer (SSL) encryption and/or other techniques.

The search engine interface 214 may behave as a server-to-server interface. The search engine interface 214 may be a web services interface. The search engine interface 214 may allow other servers to connect to the server for the purpose of allowing servers and/or web sites to subscribe to the list of file entries in the database 220. A web site may subscribe to the server 110 to access the database 220 via search engine interface 214 to obtain information to determine whether it should remove infringing content. For example, the website may remove infringing content when an entry in its database is contained in the database 220. The search engine interface 214 may provide encrypted, secure communications with web servers and other servers.

The data input interface 216 may allow other servers to connect to the server to provide for the automated bulk entry of file entries to the database 220. The data input interface 216 may behave as a server-to-server interface. The data input interface 216 may be a web services interface. The data input interface 216 may provide encrypted, secure communications with web servers and other servers.

The server connector module 218 may provide an interface to client connector modules 230 on client devices. The server connector module 218 may provide encrypted, secure communications with to client connector modules 230 on client devices.

The database 220 may contain information about files that are to be filtered from the network. The database 220 may be used to store information about infringing files that should be removed from the peer-to-peer network. The database 220 may be used to store information about infringing files that should be replaced with licensed versions. The database 220 may also contain information concerning content filter partners and participants, including permissions to log into the server to add file identifiers to the database 220. The database 220 may store information in an encrypted or other secure manner to prevent unwanted access to the information in the database from being disseminated should network security or other security measures be breached.

In addition to an operating system and other software typical for the particular client device 112, the client device also includes client connector module 230. The client connector module 230 may be integrated with, distributed with and/or installed with peer-to-peer file sharing applications. The client connector module 230 may be resident on the computers of people who are running peer-to-peer file sharing applications. The client connector module 230 may be a plug-in to peer-to-peer file sharing applications.

Server 110 and client devices 112 may communicate with each other over a network through server connector module 218 and client connector module 230, respectively.

As to FIG. 2, additional and fewer units, modules or other arrangement of software, hardware and data structures may be used to achieve the processes and apparatuses described herein.

FIG. 3 is a block diagram of a network 300 in which the filter for a distributed network may be implemented as described herein. FIG. 3 shows a hierarchical network 300 having ordinary nodes 310 and indexing nodes 320. FIG. 3 shows the peer-to-peer relationship between the nodes in the hierarchical network 300. FIG. 3 shows the peer-to-peer network 300 without any filtering solution in place.

A hierarchical network is a kind of distributed network. A distributed network is a network of autonomous nodes which are not under centralized control. In a flat peer-to-peer distributed network, all nodes are equal, have the same capabilities, and perform the same functions. In contrast, in a hierarchical peer-to-peer distributed network, some nodes—sometimes nodes with greater bandwidth and/or processing power—are given additional duties or responsibilities compared to other nodes. Nodes with additional duties or responsibilities may be referred to as indexing nodes. In a hierarchical peer-to-peer distributed network, only a small fraction of the total nodes may function as indexing nodes.

In a network, including distributed and peer-to-peer networks, an indexing node 320 is a node which may: (a) receive a listing of files advertised to it by other nodes, either or both indexing nodes and ordinary nodes (advertisement 316); and may (b) receive search requests 312 and 322 from other nodes, both ordinary and indexing, when those nodes have initiated a search for a particular file. An indexing node 320 may contain and maintain a database of files that have been advertised to it by nodes which are in communication with it. As used herein, to advertise means to inform other nodes on a network a file is available. To do this, the ordinary node advertises the availability of the file to nodes by communicating over the network 300 with indexing nodes 320 and/or ordinary nodes 310.

User search requests 312 for a particular file are initiated by an ordinary node 310 and are processed by an indexing node 320. Example search requests include one or more of each of words in the title of movies, songs, television shows; names of performers, actors, musicians; and the like. An indexing node 320 may respond to an incoming search request by searching its local database and providing in return a match list 324 of matching file entries. If an indexing node 320 does not have the file requested by an ordinary node 310, the indexing node 320 may contact other indexing nodes 320 via search request 322. That is, the indexing nodes 320 are in communication with each other so that if a given indexing node 320 does not have a requested file in its local database, it may forward the search request 322 to another indexing node 320.

In a flat peer-to-peer network, any node is capable of being an indexing node 320. That is, every node in a flat peer-to-peer network may function as an indexing node. However, because this is inefficient, many peer-to-peer networks elevate a subset (often on the order of a few percent) of the total number of nodes to act as indexing nodes 320. Examples of indexing nodes include “supernodes” in the FastTrack peer-to-peer network and “ultrapeer” nodes in the Gnutella peer-to-peer network.

Nodes in a peer-to-peer network which are not functioning as indexing nodes 320 may be referred to as ordinary nodes 310. As used herein, ordinary nodes 310 may be capable of sending advertisements 316 of available files to indexing nodes 320; sharing out available files; and sending search requests 312 to indexing nodes 320 on the network 300. Ordinary nodes 310 typically do not receive search requests from other nodes and do not maintain a database of content being shared by other nodes. As compared to indexing nodes 320, ordinary nodes 310 typically have less bandwidth and/or processing power. When users at an ordinary node 310 initiate a file search, a search term or search query may be sent as a search request 312 to an indexing node 320 with which that ordinary node is in communication. The ordinary node 310 may then receive in response to the search request 312 a match list 314 from the indexing node 320.

Indexing nodes are distinguished from ordinary nodes for illustrative purposes. The distinction is helpful to describe the systems and methods disclosed herein. There is no additional or special significance to this naming convention. That is, other names may be used to refer to these nodes. It is the functionality and features of the nodes that is pertinent to the description herein. Further, nodes, ordinary and indexing, may be a computing device capable of network communications. Although nodes may typically be personal computers, desktop computers, notebook computers, and server computers, they may also be any computing device.

FIG. 4 is a block diagram of a network 400 having a server 430, indexing nodes 420, and ordinary nodes 410 in which the filter for a distributed network described herein may be implemented. In addition to the communications and functionality described above in FIG. 3 regarding the indexing nodes 320 and ordinary nodes 310, the ordinary nodes 410 and indexing nodes 420 are augmented with additional functionality which may be achieved in software. The indexing nodes 420 and ordinary nodes 410 may have the same capabilities and functionality of corresponding indexing nodes 320 and ordinary nodes 310 described regarding FIG. 3, and may also perform additional functions and/or have additional capabilities. The server 430 may be the server 110 from FIGS. 1 and 2, and the indexing nodes may be the client device 112 from FIGS. 1 and 2.

The techniques described herein may be implemented using a server 430 to receive and process index requests 432 and to provide index responses 434 to indexing nodes 420. In one embodiment, the index requests and the index responses are encrypted and/or digitally signed. The encryption may prevent third parties on the network from obtaining access to the information in the index requests and the index responses. In one embodiment, the sequence of receiving an index request and providing an index response is a process whereby an indexing node 420 makes a call using its client connector module to ask the server 430 whether the indexing node 420 should index a particular file which has been advertised to it by a node with which it is in communication. In this embodiment, to send an index request, the indexing node 420 uses the client connector module to make a call to the server 430 to check on the status of the requested file. The server 430 may evaluate whether the file is an infringing file which should not be indexed by the indexing node. The server 430 may, via its server connector module, send an index response 434 to the client connector module. The index response 434 may instruct the indexing node 420 to either index or not index the file(s) for which permission was requested. The index response 434 may instruct the indexing node 420 to index an alternate, licensed, file instead of the original file for which permission was requested.

Description of Methods

FIG. 5 is a flow chart of an overview of the actions taken to implement an embodiment of the filter for a distributed network described herein. An indexing node receives an advertisement from an ordinary node, as shown in block 510, informing the indexing node of the availability of an advertised file specified in the advertisement. The advertisement may include a file identifier that uniquely identifies the file available for sharing by the ordinary node.

As used herein, the term file means data identified by a unique identifier. The kind of data stored in a file may be any kind of content, including, for example, without limitation: music; video; text; graphics; a song; a full CD, album or DVD; a book; a magazine; a story; an article; a sporting event; a film; a television program; a concert recording; a newspaper; and others. The file may be in a well-known or proprietary format, including, for example, without limitation, ASCII, portable document format (PDF), MP3, MP4, MPEG, RAW, TIFF, JPEG, WAV, RealAudio, WidowsMedia, and others. References to files may include both the unique identifier of that file and associated meta data about the file. The meta data may include, for example, without limitation, file title, file author, file size, file creation date, file format, encryption used, and/or other information.

A unique identifier is a combination of alphabetic characters and/or numbers and/or symbols that uniquely identify a file. If two files are identical, they have the same unique identifier. The filehash of a file may be the unique identifier for that file. When a file refers to or is a website, the unique identifier may be the uniform resource locater (URL) or uniform resource identifier (URI) of the file. In a content management system or database the unique identifier may be a system created identifier of the file. The unique identifier may be formed from the name of the file concatenated with or otherwise combined with its file size and a cyclical redundancy check (CRC) value of the file. This patent is agnostic to the kind or type of unique identifier used or algorithm used to create the unique identifier.

The indexing node prepares an index request based on the advertisement and sends the index request to the server, as shown in block 520, seeking permission to index the advertised file. The indexing node may encrypt or otherwise secure the index request before transmission to the server. The index request may include a single advertised file or a group of advertised files. The indexing node may send index requests for advertised files immediately upon receipt of or shortly after receipt of a file advertisement from an ordinary node. The indexing node may periodically send index requests for advertised files received over a system defined period of time from one or more ordinary nodes. The system defined period of time may be, for example, one hour, four hours, 12 hours, one day, etc. The indexing node may periodically send index requests for advertised files when a system defined number of advertised files has been received. The system defined number of advertised files may be, for example, four files, 12 files, 16 files, 128 files, 278 files, 1000 files, etc.

The server may receive the search request and searches its database for the file specified in the index request, as shown in block 530. Before the server performs the search, the server may perform a security check to verify or otherwise authenticate that the index request came from an authorized source. The server may decrypt the index request. The server may prepare an index response including an action code and optional alternative data for the advertised file, as shown in block 540. The indexing node may receive the index response from the server, as shown in block 550. The indexing node takes appropriate action based on the index response, as shown in block 560. The appropriate action may be one of: (1) index, as shown in block 562; (2) do not index, as shown in block 564; and (3) substitute, as shown in block 566.

When the appropriate action based on the index response is to index the advertised file, the indexing node adds the file identifier for the advertised file to its database, as shown in block 572. When the appropriate action based on the index response is to not index the advertised file, the indexing node does not add the file identifier for the advertised file to its database, as shown in block 574. When the appropriate action based on the index response is to substitute a file for the advertised file, the indexing node adds a file identifier for a substitute file specified in the index response to its database, as shown in block 576. The file identifier for the substitute file may refer to a copyright protected, licensed or authorized file made available by a copyright owner, licensee, or other authorized legal source and may be provided by a participant or partner. The substitute file may be a URL of a web page or other location where an alternate version of the file may be obtained. The user may be given the option to buy a substitute file in the form of a licensed or otherwise authorized version of the advertised file. A URL may be provided to initiate the purchase of a substitute licensed file.

FIG. 6 is a flow chart of the actions taken to implement a first embodiment of the filter for a distributed network described herein. The filter for a distributed network may be implemented on a network like that shown in FIG. 4 having ordinary nodes, indexing nodes and at least one server. In this embodiment, the ordinary nodes are implemented by a client such as client device 112 shown in FIG. 1 running peer-to-peer software, while the indexing nodes are implemented by a client such as client device 112 shown in FIGS. 1 and 2 running peer-to-peer software augmented with a client connector module as described above regarding FIG. 2. In addition, the server may be implemented as server 110 shown in FIGS. 1 and 2.

A method begins with the indexing node receiving an advertisement from an ordinary node, as shown in block 610. The indexing node forwards the advertisement to its client connector module, as shown in block 612. In this embodiment, the client connector module checks its local cache for the advertised file, as shown in block 614. The flow of actions then continues based on whether the file identifier of the advertised file is in the local cache of the client connector module, as shown in block 616.

When the client connector module determines that the advertised file is not in its local cache, the flow of actions continues at block 620, where the client connector module sends an index request to the server. The server then searches its database for the file identifier or identifiers specified in the index request, as shown in block 622. The server prepares an index response including an action code and optional alternative data for the advertised file and sends the index response to the client connector module via its server connector module, as shown in block 624. The client connector module receives the index response from the server, as shown in block 626, and creates a corresponding receipt timestamp for the index response. The client connector module then adds the index response and the receipt timestamp to its local cache, as shown in block 628. The client connector module then forwards the index response to the indexing node, as shown in block 636. The flow of actions continues at block 560 of FIG. 5 as described above.

When the client connector module determines that the advertised file is in its local cache, the flow of actions continues at block 630, where the client connector module checks the timestamp of the cache entry for the advertised file. The check of the timestamp may be made to determine if the cache entry for the advertised file has expired. An entry may be deemed to have expired if it the timestamp shows that the entry was received more than a system defined amount of time earlier. The system defined period of time may be hours, days, or any portion thereof. In one embodiment, an entry is deemed to have expired if it has been in the cache longer than four days. The flow of actions continues based on whether the timestamp of the entry for the advertised file has expired, as shown in block 632.

When the entry has expired, the flow of actions continues at block 620, as if there was no entry for the advertised file in the local cache of the client connector module.

When the entry has not expired, the flow of actions continues at block 634, where the client connector module retrieves the cached record for the advertised file. The client connector module then prepares an index response based on the cached record for the advertised file. The client connector module then forwards the index response to the indexing node, as shown in block 636. The flow of actions continues at block 560 of FIG. 5 as described above.

FIG. 7 is a flow chart of the actions taken to implement a second embodiment of the filter for a distributed network described herein. The filter for a distributed network may be implemented on a network like that shown in FIG. 4 having ordinary nodes, indexing nodes and at least one server. In this embodiment, the ordinary nodes are implemented by a client such as client device 112 shown in FIG. 1 running peer-to-peer software, while the indexing nodes may be implemented by a client such as client device 112 shown in FIG. 1 running peer-to-peer software. In this embodiment, the functionality of the client connector module described above regarding FIGS. 2 and 6 is merged into or otherwise included in the peer-to-peer application running on the indexing nodes. In addition, the server may be implemented as server 110 shown in FIGS. 1 and 2.

The indexing node receives an advertisement from an ordinary node, as shown in block 710. The indexing node searches its local database for the file identifier of the advertised file, as shown in block 712. The flow of actions then continues based on whether the file identifier of the advertised file is in the database of the indexing node, as shown in block 716.

When the indexing node determines that the file identifier of the advertised file is not in its database, the indexing node sends an index request to the server, as shown in block 720. The server searches its database, as shown in block 722. The server prepares an index response including an action code and optional alternative data for the advertised file and sends it to the indexing node, as shown in block 724. The indexing node receives the index response from the server, as shown in block 726, and prepares a receipt timestamp. The indexing node adds information from the index response and a corresponding receipt timestamp to its database as a record or entry for the advertised file, as shown in block 728. The flow of actions continues at block 560 of FIG. 5 as described above.

When the indexing node determines that the advertised file is in its database, the flow of actions continues at block 730, where the indexing node checks the timestamp of the database entry for the advertised file. The check of the timestamp is made to determine if the entry for the advertised file has expired. An entry is deemed to have expired if its timestamp shows that the record was received more than a system defined amount of time earlier. The system defined amount of time may be hours, days, or any portion thereof. In one embodiment, an entry is deemed to have expired if it has been in the database longer than seven days. The flow of actions continues based on whether the timestamp of the entry for the advertised file has expired, as shown in block 732.

When the entry has expired, the flow of actions continues at block 720, as if there was no record for the advertised file in the database of the indexing node.

When the entry has not expired, the flow of actions continues at block 734, where the indexing node reviews the database record for the advertised file. The indexing node takes appropriate action based on the record for the advertised file, as shown in block 736. The appropriate action may be to do nothing; to update the database record for the advertised file; to index the advertised file; to remove the advertised file entry from the index; to replace the existing indexed entry with an entry for an alternate, possibly copy protected, file; to replace the existing indexed entry with a URL of a web page or other location where an alternate version of the file may be obtained; or other action. At this point, an additional check may be performed to determine whether the record for the indexed file is licensed or otherwise authorized. If warranted, an alternate file may be substituted for the indexed file. The substitute file may be a URL of a web page or other location where an alternate version of the file may be obtained. The user may be given the option to buy a substitute file in the form of a licensed or otherwise authorized version of the advertised file. A URL may be provided to initiate the purchase of a substitute licensed file.

When implementing and rolling out point-of-indexing filter software in servers and indexing nodes, some nodes on the network will not include a point-of-indexing filter. This may occur when introducing a new version of a peer-to-peer application that has added point-of-indexing filter functionality. In this case, existing nodes on the network will not include any point-of-indexing filtering; only the new nodes will include point-of-indexing filter. In addition, it is contemplated that hackers may modify peer-to-peer applications or indexing nodes to remove a point-of-indexing filter capability such that a subset of the nodes on the peer-to-peer network run hacked peer-to-peer applications without filtering methods, or with disabled filtering methods. To assist in the introduction of point-of-indexing filtering to peer-to-peer network, and/or to reduce or eliminate the impact of hacked versions of peer-to-peer applications and nodes, an embodiment of the peer-to-peer applications running on ordinary nodes may be implemented with a preferred indexing node feature. Peer-to-peer applications having the preferred indexing node feature may send search requests to indexing nodes which provide a point-of-indexing filter, and/or may not send requests to indexing nodes which do not provide point-of-indexing filter capability.

In a peer-to-peer network that includes ordinary nodes and indexing nodes in which some ordinary nodes and indexing nodes incorporate a point-of-indexing filter and others do not, the following method may be implemented in conjunction with the methods described above in FIGS. 5, 6 and 7. When a new user at an ordinary node wishes to gain access to a peer-to-peer network, the ordinary node may connect to one or more indexing nodes on the network. The ordinary node may send a participant query to one or more of the indexing nodes to determine whether the indexing node implements the point-of-indexing filter. The participant query may be a data unit that includes a code that signifies a request asking the indexing node to provide a participant response indicating its software version and/or software build date and/or software capabilities, including whether the indexing node implements a point-of-indexing filter. The ordinary node may, in one embodiment, determine the capabilities of the indexing node based on the software version and/or build date specified in the participant response. This may be achieved by including in the ordinary node or providing the ordinary node access to authenticated participant information. The authenticated participant authentication information may include a build date and/or a version number such that all software having a version number exceeding an authenticated participant version number and/or having a build date later than an authenticated participant build date is known to incorporate point-of-indexing filter features.

In one embodiment, the peer-to-peer application may engage in a challenge-response exchange with each prospective indexing node to learn whether the indexing node is an authenticated participant that provides point-of-indexing filter features. An embodiment of a challenge-response exchange may perform the following process.

A new ordinary node running a peer-to-peer application may contact an authentication server requesting a challenge string. The authentication server may be the same server as the server that implements the server described regarding FIGS. 5, 6 and 7, or may be a different server under the control of or in partnership with the same entity that controls the server described regarding FIGS. 5, 6 and 7. In response to receiving the challenge string request, the authentication server may provide two random character strings, String A and String B, referred to as sibling strings. The authentication server may store both sibling strings in an authentication database. The authentication server may store may also store information identifying the ordinary node. The ordinary node may send an authentication query including String A to a prospective indexing node. In response to receiving the authentication query, the prospective indexing node may contact the authentication server, sending a sibling query including String A, requesting a sibling string. The authentication server receives the sibling query and prepares a sibling response. The sibling response will include String B if the indexing node is an authenticated participant that provides point-of-indexing filter features. The prospective indexing node responds to the ordinary node, supplying the sibling string it received from the authentication server. The ordinary node compares the sibling string received from the authentication server with the string received from the prospective indexing node. If the two strings match, the indexing server is authenticated as having point-of-index filter capability. The ordinary node may select this particular indexing node as the, or one of the, indexing nodes to which it will send search queries and from which it accept search results. If the sibling string received from the authentication server does not match the string received from the prospective indexing node, the ordinary node will not send search queries to the indexing node or accept search results from it.

In other embodiments, the peer-to-peer application on ordinary nodes may include, store or access a locally stored black list and/or a locally stored white list of indexing nodes. Ordinary nodes running a peer-to-peer application may determine which indexing nodes to advertise to and/or receive match lists from based on reference to the black lists and/or white lists. In another embodiment, the peer-to-peer application may access a remotely stored and maintained black list and/or white list of indexing nodes which may be located at an authentication server.

In one embodiment, all ordinary nodes may function as indexing nodes. That is, in one embodiment, all nodes in a peer-to-peer network are indexing nodes. Stated yet another way, in one embodiment, all nodes function as both indexing nodes and ordinary nodes.

Example Data Units

The following is an example format of one embodiment of an index request data unit sent from the client connector module to the server in the embodiment shown in and described regarding FIG. 6 and from the indexing node to the server in the embodiments shown in and described regarding FIGS. 5 and 7.

INDEX REQUEST DATA UNIT
Field          Description
Data_type      The contents of the data unit. As described herein, the
               contents of the data unit is an index request. In an example
               embodiment, the Data_type is “GFRIPC” for global file
               registry indexing permission check.
Data_format    A version number of this format of the file. This field allows
               the data format to be changed in future and for the inclusion
               of multiple different file formats for one or more of a variety
               of content.
Client_name    This is the name of the parent application—for example,
               “someProgram”—which is may be used by the server knows
               how to interpret the network-specific Data Elements which
               follow.
Client_version This is the version number of the parent application, needed
               so that the server can deal with multiple versions of the
               parent application's data elements.
Transaction_ID A unique ID number for this data unit, assigned by the client
               connector module.
Data_Element   One or more data elements. The format of each data element
1 . . . N      is described below.
Random         Random data, used to avoid replay attacks, for other security
               reasons, and for other functions. In one embodiment, the
               random data is 10 bytes in size.
Signature      A digital signature for the entire data unit, including the
               plain-text fields.

In one embodiment, the Data_type and Data_format fields are plain text, and the fields from client name through the signature are encrypted. In other embodiments, the Data_type and Data_format fields are alphabetic and/or numeric values that are system defined.

The following is the format of one embodiment of the Data_Element field of the index request data unit.

INDEX REQUEST DATA ELEMENT FIELD FORMAT
Field            Description
Element_ID       An ID or handle assigned to each data element used by the
                 client connector module to correlate permissions received
                 from the server in response to the request. In one
                 embodiment the Element_ID is simply numbered 1 . . . , 2 . . . ,
                 3 . . . , within each data unit. When the client connector
                 module receives a response from the server, it can use a
                 combination of the Transaction_ID and the Element_ID to
                 uniquely identify a particular request that it has sent to the
                 server.
File_Identifier  The file identifier is a unique identifier for the file for which
                 indexing permission is being sought. The format and/or kind
                 of unique identifier may be dependent on the network. For
                 example, in Gnutella based networks, the File_Identifier may
                 be a 160-bit filehash.
Space_Identifier An optional identifier that may specify the user space in
                 which the file is to be indexed.

The following is the format of one embodiment of the index response data unit sent from the server to the client connector module in the embodiment shown in and described regarding FIG. 6 and from the server to the indexing node in the embodiments shown in and described regarding FIGS. 5 and 7.

INDEX RESPONSE DATA UNIT
Field          Description
Data_type      The contents of the data unit. As described herein, the contents
               of the data unit is an index response. In an example
               embodiment, the Data_type is “GFRIPR” for global file
               registry indexing permission reply.
Data_format    A version number of this format of the file. This field allows
               the data format to be changed in future and for the inclusion of
               multiple different file formats for one or more of a variety of
               content..
Transaction_ID This Transaction_ID matches the Transaction_ID sent in the
               index request data unit.
Data_Element   One or more data elements. The format of each data element is
1 . . . N      described below.
Random         Random data, used to avoid replay attacks, for other security
               reasons, and for other functions. In one embodiment, the
               random data is 10 bytes in size.
Signature      A digital signature for the entire data unit, including the plain-
               text fields.

The following is the format of one embodiment of the Data_Element field of the index response data unit.

INDEX RESPONSE DATA ELEMENT FIELD FORMAT
Data Element field Description
Element_ID         The Element_ID of the corresponding element sent in the
                   Index Permission Request
Action_Code        0 = File unknown, okay to index
                   1 = File good, okay to index
                   2 = File bad, do not index
                   3 = File bad, replace with alternative (Alt) entry, referred to in
                   the description herein as “substitute”
                   4 = Server Busy, don't try again for at least N minutes, where
                   N may be an appropriate value such as, for example, 2, 5,
                   10, 22, 30, 60, and others.
                   5 = File bad, replace with URL or location where an alternate
                   licensed version of the file may be found, purchased and/or
                   downloaded.
Alt Identifier     If the Action Code is “File bad, replace with Alt entry”/
Alt Filename       “substitute”, the server and/or the client connector module may
Alt Title          return these Alt fields to the calling application on the indexing
Alt Author         node so that the indexing node may replace the file entry for
Alt Album          which the index request was submitted with the specified
Alt_FallbackURL    replacement file. These fields are not present if the Action
                   Code is anything other than “File bad, replace with Alt entry”/
                   “substitute”.

Closing Comments

The point of indexing systems and methods described above may reduce traffic to the server which maintains the list of infringing content which is to be removed from the network when compared to the point of search/download solution and the point of sharing solution described above. This may reduce the cost of running servers when compared to the point of search/download solution and the point of sharing solution described above and to other solutions which involve each node on the network having to individually make contact with a server to determine whether a file may be downloaded from and/or shared out to other nodes on a network.

The server in the point of indexing systems and methods described above may have no knowledge of the IP address or identity of individual users on the peer-to-peer network who are conducting searches, receiving files and/or sharing files. The point of indexing systems and methods described above may be implemented to maintain user privacy.

In one embodiment, users of a hacked version of the client peer-to-peer application gain no advantage when the point of indexing systems and methods described above are employed. As such, when one embodiment of the point of indexing systems and methods described above are employed, there is little motivation for hackers to create hacked versions and no motivation for users to install hacked versions of the client peer-to-peer application.

When one embodiment of the point of indexing systems and methods described above are employed, the point of indexing systems and methods described above are effective when less than all users of a peer-to-peer network install a version of the client peer-to-peer application which incorporates the point of indexing filtering described herein. In some embodiments of peer-to-peer networks, a success threshold is reached when a particular portion of users—on the order of 30%—have installed a version of the client peer-to-peer application which includes the point of indexing filter techniques described above. When the success threshold is reached, infringing content is filtered from the entire peer-to-peer network, such that infringing content is successfully filtered from all users—importantly, including users who are running peer-to-peer clients which do not include the point of indexing filter.

The foregoing is merely illustrative and not limiting, having been presented by way of example only. Although examples have been shown and described, it will be apparent to those having ordinary skill in the art that changes, modifications, and/or alterations may be made.

Although many of the examples presented herein involve specific combinations of method acts or system elements, it should be understood that those acts and those elements may be combined in other ways to accomplish the same objectives. With regard to flowcharts, additional and fewer steps may be taken, and the steps as shown may be combined or further refined to achieve the methods described herein. Acts, elements and features discussed only in connection with one embodiment are not intended to be excluded from a similar role in other embodiments.

As used herein, whether in the written description or the claims, “plurality” means two or more.

As used herein, whether in the written description or the claims, the terms “comprising”, “including”, “having”, “containing”, “involving”, and the like are to be understood to be open-ended, that is, to mean including but not limited to. Only the transitional phrases “consisting of” and “consisting essentially of”, respectively, are closed or semi-closed transitional phrases with respect to claims.

Use of ordinal terms such as “first”, “second”, “third”, etc., in the claims to modify a claim element does not by itself connote any priority, precedence, or order of one claim element over another or the temporal order in which acts of a method are performed, but are used merely as labels to distinguish one claim element having a certain name from another element having a same name (but for use of the ordinal term) to distinguish the claim elements.

As used herein, “and/or” means that the listed items are alternatives, but the alternatives also include any combination of the listed items.

Claims

1. A device coupled to a network, wherein said network comprises a peer-to-peer network comprising ordinary nodes and indexing nodes, the device comprising hardware including at least one processor, and software, in combination with said hardware to: (a) receive a request from an indexing node in said network, said request corresponding to a particular data item, wherein said indexing node made said request in response to an advertisement of said particular data item by an ordinary node in said network, said advertisement including a data item identifier corresponding to said particular data item, and wherein the request comprises said data item identifier corresponding to said particular data item;(b) authenticate that said request was from an authorized source; and(c) provide a response to the indexing node in response to the request, wherein the response to the indexing node comprises an indication that the indexing node should index a substitute data item instead of the particular data item, wherein the response comprises an identification of the substitute data item to be indexed instead of the particular data item, and wherein the identification of the substitute data item comprises a uniform resource locator (URL) or a uniform resource identifier (URI) of the substitute data item.

2. The device as in claim 1 wherein said response is based, at least in part, on whether or not the particular data item corresponds to an infringing data item.

3. The device as in claim 2 further operable to: (d) determine whether or not said particular data item corresponds to said infringing data item.

4. The device of claim 3 wherein the request comprises a particular identifier for said particular data item, and wherein said device is operable to determine whether or not said particular data item corresponds to said infringing data item by determining whether or not said particular identifier corresponds to an identifier in a database, said database comprising a plurality of identifiers.

5. The device of claim 1 wherein the identifier comprises a hash of the particular data item.

6. The device of claim 1, wherein the device is configured to receive the request over the Internet and to provide the index response over the Internet.

7. The device of claim 1, wherein the network is the Internet.

8. The device of claim 1 wherein the device comprises a server.

9. The device of claim 1, wherein the substitute data item is a different version of the particular data item.

10. The device of claim 1, wherein the substitute data item is a copy protected version of the particular data item.

11. The device of claim 1 wherein said request corresponds to a request made at the indexing node to index the particular data item.

12. The device of claim 1 wherein said authenticating in (b) comprises: verifying that the request was from an authorized source.

13. The device of claim 1 wherein said indexing node made said request in response to receipt by said indexing node of said advertisement.

14. A computer-implemented method operable in a network, said network comprising a peer-to-peer network comprising a server, ordinary nodes, and indexing nodes, the method comprising the steps of: (A) receiving a request at said server from an indexing node in said network, said request corresponding to a particular data item, wherein said indexing node made said request in response to an ordinary node in said network advertising a particular data item to nodes on the network, said advertisement including a data item identifier corresponding to said particular data item, and wherein the request comprises said data item identifier corresponding to said particular data item;(B) authenticating, at said server, that said request was from an authorized source; and(C) in response to the request, providing a response to the indexing node, wherein the response to the indexing node comprises an indication that the indexing node should index a substitute data item instead of the particular data item, wherein the response comprises an identification of the substitute data item to be indexed instead of the particular data item, and wherein the identification of the substitute data item comprises a uniform resource locator (URL) or a uniform resource identifier (URI) of the substitute data item.

15. The method of claim 14 wherein said response is based, at least in part, on whether or not the particular data item corresponds to an infringing data item.

16. The method of claim 15 further comprising: (D) determining whether or not said particular data item corresponds to said infringing data item.

17. The method of claim 16 wherein the request comprises a particular identifier corresponding to said particular data item, and wherein said determining whether or not said particular data item corresponds to said infringing data item comprises: determining whether or not said particular identifier corresponds to an identifier in a database, said database comprising a plurality of identifiers.

18. The method of claim 14, wherein the response comprises alternative data.

19. The method of claim 14 wherein the particular data item identifier comprises a hash of the particular data item.

20. The method of claim 14, wherein the substitute data item is a different version of the particular data item.

21. The method of claim 14, wherein the substitute data item is a copy protected version of the particular data item.

22. The method of claim 14, wherein the network is the Internet.

23. The method of claim 14 wherein said request corresponds to a request made at the indexing node to index the particular data item.

24. The method of claim 14 wherein the authenticating in (B) comprises: verifying that the request was from an authorized source.

25. The method of claim 14 wherein said indexing node made said request in response to receipt by said indexing node of said advertisement.

26. Non-transitory computer-readable media tangibly embodying a program of instructions executable by at least one computer, the program comprising code to: (a) receive a request from an indexing node in a network, wherein said network comprises a peer-to-peer network comprising said at least one computer, ordinary nodes, and indexing nodes, said request corresponding to a particular data item, and wherein said indexing node made said request in response to an ordinary node in said network advertising a particular data item to nodes on the network, said request including a data identifier corresponding to said particular data item, and wherein the request comprises said data item identifier corresponding to said particular data item; and(b) authenticate that said request was from an authorized source; and(c) provide a response to the indexing node in response to the request, wherein the response to the indexing node comprises an indication that the indexing node should index a substitute data item instead of the particular data item, wherein the response comprises an identification of the substitute data item to be indexed instead of the particular data item, and wherein the identification of the substitute data item comprises a uniform resource locator (URL) or a uniform resource identifier (URI) of the substitute data item.

27. The non-transitory computer-readable media of claim 26 wherein said response is based, at least in part, on whether or not the particular data item corresponds to an infringing data item.

28. The non-transitory computer-readable media of claim 27, the program further comprising code to: (d) determine whether or not said particular data item corresponds to said infringing data item.

29. The non-transitory computer-readable media as in claim 26, wherein the response comprises alternative data.

30. The non-transitory computer-readable media of claim 26 wherein the identifier comprises a hash of the particular data item.

31. The non-transitory computer-readable media of claim 26, wherein the program is configured to receive the request over the Internet and to provide the index response over the Internet.

32. The non-transitory computer-readable-media of claim 26, wherein the network is the Internet.

33. The non-transitory computer-readable media of claim 26, wherein the substitute data item is a different version of the particular data item.

34. The non-transitory computer-readable media of claim 26, wherein the substitute data item is a copy protected version of the particular data item.

35. The non-transitory computer-readable media of claim 26 wherein said request corresponds to a request made at the indexing node to index the particular data item.

36. The non-transitory computer-readable media of claim 26 wherein said authenticating in (b) comprises: verifying that the request was from an authorized source.

37. The non-transitory computer-readable media of claim 26 wherein said indexing node made said request in response to receipt by said indexing node of said advertisement.

38. The non-transitory computer-readable media of claim 26 wherein said at least one computer is a server.