Patent Application
20050226152
1. Field of Invention
This invention pertains to a method and system in which a signature is obtained from several network parameters and is used to determine whether a content sink is within a predetermined geographic locality.
2. Description of the Prior Art
The fundamental problem addressed by the invention is that there is currently no way to guarantee (with high confidence) that a content sink device (e.g., television) is actually within the home, business, or other geographically-limited region to which the content owner desires to limit the distribution, reproduction, or playback of his content from a content source. For example, if the source and the sink are connected through the Internet then they might be on opposite sides of the earth.
A case of special concern involves the use of Digital Transmission Content Protection (DTCP) (http://www.dtcp.com) protocol for copy protection over IEEE 1394, USB, MOST, and Bluetooth networks. DTCP only “secures” the link between the (5C) source and sink; there is no built-in notion of proximity between the source and sink devices. Part of the problem is solved by the (5C) standard, which guarantees (with high confidence) that a receiver is actually authorized to decode/store/playback (5C) encoded content. However, it is possible that the authorized (5C) receiver may be located too far away from the (5C) source, according to the desired rules of the content owner. So the (5C) standard per se does not solve the problem of limiting the geographic diffusion of content. Techniques that attempt to identify the receiving content user, for example by having the user enter a PIN or insert a smart card into the receiver are helpful in limiting the undesired diffusion of content outside of the owner's devices or domain, but do not address the fundamental problem that the receiving user may have placed the receiving device “too far away” from the potential content source. There are many known ways of determining the geographic location of an object.
“Triangulation” has been used for many years to establish the location of objects that emit electromagnetic radiation. This involves the use of two or more receivers with directional antennae and a geographic information database, such as a map. Given the known locations and directions of maximal received signal strength at the receivers, it is easy to find the transmitter location as the point at which lines drawn on the map from each receiver to “infinity” in the direction of maximal signal strength, intersect. In this case, the cooperation of the transmitter is not necessary, and, in fact, triangulation is often employed to locate unauthorized transmitters. A triangulation-based approach may serve the purpose of this invention, but only if the content receiver emits electromagnetic radiation, and two or more triangulation receivers are available.
More recently, it has become common for receivers to establish their positions using a Global Positioning System (GPS), which relies on measuring the differential delays of several signals transmitted from an array of GPS satellites. If the content receiver includes a GPS receiver and “return-channel” transmitter, it can convey its location back to the content source. The content source may be assumed to include a GPS receiver and/or a geographic database and means for calculating its distance from the content receiver. However, GPS does not work reliably indoors, and a receiver may be set with an incorrect location code as well.
Localization techniques that use so-called “ultra-wideband (UWB) radio” have also recently been described. For example, see U.S. Pat. No. 6,002,708.
Techniques are also known whereby proximity of receivers to transmitters is established using Round-Trip Time (RTT) measurements between a transmitted signal from the source to the sink and the corresponding return signal. In the case of a single cooperating transmitter-receiver pair, this RTT measurement may be sufficient to establish that the receiving device is “close enough” to the transmitting device that the receiving device should be authorized to decode/store/playback a specified amount of content.
One proposed, anti-diffusion solution involves the source setting the “Time to Live” (TTL) field to three in (IP) packets. This assumes that packets will traverse no more than two routers within a home network, else it is assumed that they have left the bounds of the home (some research shows that packets must typically traverse six routers to get beyond the ISP to which the home network is connected) and the third router encountered by the packet should “kill” (i.e., discard) it. A second potential solution is the measurement of RTT using DTCP-level ping messages as is done in the DTCP over IP mapping.
Another proposed solution is to require that the Wired Equivalency Protocol (WEP) be employed on (partly or wholly) wireless local networks. This addresses the cases of “unintentional sharing” of content that may occur simply by virtue of an unintended receiver being within range of a wireless content source due to:
1. innocent co-location, e.g., reception by one's neighbor, or
2. eavesdropping, e.g., by “freeloaders” parking vehicles within reception range of unprotected wireless networks.
International Patent Application number WO 03/075125 A2, mentions the use of RTT, among other mechanisms, as a means to authenticate receiving devices in a “location aware data network”.
International Patent Application WO 01/93434 A2, describes the use of RTT and triangulation to enable/disable a function in a remote device in a network comprising devices that communicate over a UWB wireless medium.
U.S. patent application No. 20020136407 by Denning, et. al., describes a system/method in which data may only be decrypted at (a) specified geographic location(s). Location information is typically supplied by the GPS.
The invention pertains to a system and method which rely on several parameters related to the locality of a device or its router within the Internet and with respect to content sources. The parameters utilize certain characteristics of localized networks (e.g., but not limited to, home networks) to limit content diffusion to a desired distance from the source. These techniques are used to authorize reception by sinks within an allowed distance from the source, and prevent reception at a greater distance.
The several parameters include common IP subnet addresses, gateway MAC addresses, lengths of paths to an internet server or multimedia source, reception of RF and base cell station signals, lengths of path to home network server and monitoring of packet transfer fragmentation. These parameters may be employed all at once or a subset of parameters may be used to define a signature for a sink or content receiving device. The signatures can be recalculated at will, or on demand. If several parameters are used then the parameters may be weighted for different signatures. For example, in signatures associated with a small region, one set of parameters may be emphasized while the other parameters may be essentially ignored. For signatures associated with a larger geographic region, other parameters may be emphasized.
The present invention provides techniques which use characteristics or signatures of networks to determine locality. An example of two home networks is shown in
Home B (113) includes a laptop PC 118 that is connected directly to the Internet 111 through a DSL connection or other similar relatively high speed means.
Users 100, 101, 109, 112 are operating the various devices in homes A and B to obtain Internet connection and to perform other operations.
The router 107 provides a degree of protection for home A (114) from unwanted attention by other Internet users. Whether the user 112 in home B can access devices in home A depends on the relationship between user 112 and the home A household, e.g., whether the access point 115 is restricted and/or whether users in home B (including 113) have been granted rights to access point 115.
A server 119 also connected to Internet 111 provides content exchanges.
A content provider such as a satellite operator providing audio-visual content to the home via the satellite receiver 106 desires to confine consumption of content to single households, in this case home A 114, that has the service subscription. The content provider may also be a cable operator or other relevant service provider.
There may be other reasons to confine content to the household where the content is viewable. For example, a movie studio may sell the user a DVD and desire consumption to be limited to the location where the disc is; a DVD provider or a free-to-air broadcaster might want to prevent unauthorized redistribution of the content over the Internet.
This process is referred to herein as localization of content or localization for short.
Localization is difficult to achieve in a networked world where devices are designed to communicate transparently whether they are next to each other or separated by vast distances. In this invention a method of determining is presented in which a determination is made as to whether two or more devices are local to each other through the use of signatures of the environment that each device can see. If the devices are indeed local to each other the signatures will be very similar; if the devices are far apart then the signatures will be different.
In this discussion the term “far apart” refers to the Internet connections or nodes connected to specific devices. If two homes are directly connected, for example neighbors share a common wireless network, other techniques may be required to determine localization.
As discussed above, one method of localization is the use of Round Trip Time (RTT) between devices to determine if they are local to each other. Here the source device, the device with the content, sends a “ping” message to the sink device, the device where the consumer wishes the content to go either for audiovisual consumption (i.e. the content could be audio, video, or both), for recording, or for authorized retransmission. If the time duration for the ping to be sent from source to sink and returned to sink is sufficiently short, then the source and sink are deemed to be local to each other. Another approaches uses a beacon to transmit a signal. If both the transmitter and the receiver detect the signal, they are considered to be in the same locality. Otherwise, they are not. These two techniques are described in more detail in the above-identified U.S. application Ser. No. 10/978,669.
In this invention a more sophisticated approach is taken wherein each device examines the environment around it and then the source device compares its environment with that of the sink device to determine whether they are in the “same” (or nearly the same) environment. In a preferred embodiment of the invention, several different parameters are determined, a weight is assigned to the parameters and the results are then accumulated to determine a signature related to the locality of a content receiving device. In this context the word “environment” refers to relevant aspects of the place where the device is located that can be determined by the device. The set of parameters that is determined by the environment of each device is combined into an Environment Signature. Some parameters that can be used to determine environment signatures are now described.
1. Common IP Subnet Addresses
Typically, packets exchanged between Internet devices include a subnet address (IP subnet) indicating the source for the packet. Therefore packets from different routers are associated with different IP subnet addresses. Thus, the IP subnet address is indicative of whether two devices are associated with the same router or not. The concept is exemplified by
2. MAC Layer Address of the Gateway Device.
The MAC address is a preprogrammed address associated with devices providing Internet. For example, in
3. Trace Routing
Each of the devices of networks A and B can access the content server 119 through different paths. Of course, the paths or routing for the devices of network A will be similar to each other and different from the paths of devices in network B, as illustrated in
The routing for each device of network A share consists of three legs: device x-hub106; hub 106-router 107; router 107-server 119. Thus, two of the three legs for the devices of network A are the same. If the RTT (the round trip time) is calculated for each device of network A, the resulting RTTs will be very similar. On the other hand, path or routing from devices of network B to server 119 generally need not share any paths with the devices from network A and therefore, the RTT for these devices is going to be very different.
Similarly, the actual paths from each device to server 119 are similar for devices for network A but different for devices of network B. These paths are obtained by using a “tracert” (trace route) command from each device. The trace route command returns an ID of all the intermediate routers or gateways between the respective device and server 119.
The content owner (in this case, the entity sending content through the satellite receiver) provides the addresses of several (for example, three) Internet servers similar to server 119. Each device then pings and/or traces the route (through tracert) to all these servers and the results are compared.
4. Reception of One or More Common RF Signals
As illustrated in
5. Reception of One or More Common Cell Phone Base Stations
This parameter is similar to the FM parameter discussed above, with the devices being provided with means for receiving or exchanging signals used by one or more cell phone base stations 160. The devices can then “hear” or communicate with a certain cellular base station or set of base stations. This parameter is useful when content is bound to a tight, small geographic area. For example, the content provider may wish to prevent viewing of “blacked-out” football games on cell phones with video displays that are too near the stadium in which the game is being played. Reception of a common cell-phone paging channel by both source and sink can be used as an indication of a common environment. Alternatively, the commonality of the environment can be based on the ability for both source and sink to engage in 2-way communication with (a) (set of) cellular base station(s).
6. Path to the Home Media Server
In home A 114 each device determines the path to the PC 108 being used as a home media server. The path from a device [118] in home B [113] to the home media server [108] is different even if a virtual private network is used to connect them.
7. Presence or Absence of RTT Steps Due to Packet Fragmentation
This parameter determines or monitors how packets of various sizes are transmitted between the source and sink. It is well known that long packets may be fragmented into smaller units by routers. Local routers can handle packets of relatively large sizes while long-distance routers, such as backbone routers typically fragment long packets into smaller ones for transmission. As the smaller units are received, some computational time is required to re-assemble or defragment them into the original longer packets. This concept is illustrated in
The parameters obtained by the modules are compiled by signature compiler 208, either at regular intervals, or in response to a demand from a remote location. The controller 210 controls the operation of the modules and the compiler.
A content source, such as a satellite source downloading content through antenna 105, or content server 119 can be used to push or pull content, or use any other techniques to make content available to the devices of network A and/or B. In accordance with this invention, prior to downloading the content, the source may request a signature to confirm that the device meets certain requirements associated with its locality. If a signature is available, the controller sends it on to the content source. If a signature is not available, the controller activates the various modules to obtain the signature. Alternatively, the content source downloads the required signature required for the device to receive and play the respective content. The controller then obtains the actual signature from the compiler, compares it to the required signature and if a set of predetermined requirements are met, then the compiler proceeds with obtaining and playing the content. For example, signature matching (between the required and actual signatures) does not require the signatures of the source device and the sink device to be identical. In comparing each of the elements and the whole signature, a score can be calculated such that when a sufficient score is compared to a threshold value the signatures are deemed to match.
The path determined for parameters 3 or 6, above, can allow for one or two extra hops at the beginning of the path so that, for example, a home with three routers can still score within an acceptable threshold.
Other factors, such as reception of a common FM radio station, can be weighted as necessary. For example if one of the devices was unable to receive any RF signal, e.g. for a receiver in a metal cabinet, then an FM radio reception signature element can be given no weight in the overall signature. In other cases, a weighting greater than “none” but less than “full” can be given to a signature element, with a greater weight assigned to more reliable signature elements.
As discussed above, different signatures may be required for different purposes. Each signature may be calculated by giving different weights to the various parameters defined above. The following table illustrate how four different signatures may be defined for four different localities: home, a local neighborhood, a city and a whole country:
It should be understood that this table is provided as a means of illustrating the relationships and weights assigned to various environmental or locality parameters to define respective signatures. Other parameters may be used and other weights may be assigned for different signatures, as required.
Moreover, a signature can be calculated over a period of time with periodic updates for each element. Thus a device might have time to determine elements such as RTT which would be defined in terms of the minimum round trip time between the two devices. In wireless networks there can be a significant spread between the minimum, average and maximum round trip times, e.g. the minimum RTT may be seen only once in every 100 attempts.
In another embodiment, the ping used for parameter 3, above, is replaced with a message that is part of the authentication protocol, and the source and sink need to get the same result, for example, a nonce, in their respective replies from the server. This allows the content owner to do geolocation and confine content to, for example, the United States.
Numerous modifications may be made to the invention without departing from its scope as defined in the appended claims.
This application claims priority to provisional application Ser. No. 60/558,004 filed Mar. 31, 2004, and incorporated herein by reference. This application is also related to application Ser. No. 978,669 filed Nov. 1, 2004 and incorporated herein by reference.
| Number | Date | Country | |
|---|---|---|---|
| 60558004 | Mar 2004 | US |
