Caching encrypted content in an oblivious content distribution network, and system, compter-readable medium, and terminal for the same
AssigneeCrypto Stream Ltd.
InventorBenjamin Ashley SMYTH
Life of this patent
Estimating the term…
Abstract
The disclosure describes methods and arrangements for caching encrypted content. Embodiments of the described inventions make use of a middle box to serve encrypted content rather than requiring a server to answer each request for content with a separate and distinct response, thereby allowing a network to operate effectively and efficiently even when serving encrypted content that looks different each time it is requested.
Claims32
A method, comprising:
- establishing, at a terminal, one or more communication channels coupling the terminal with a server;
- providing one or more key(s) at the server or another device;
- establishing, at the terminal, one or more communication channels coupling the terminal with a middle box;
- communicating the one or more key(s) to the terminal such that only the terminal one or more of (a) is sent the key(s), (b) receives the key(s), (c) receives a usable version of the key(s), (d) receives an unencrypted version of the key(s), (e) receives version(s) of the key(s) that are encrypted (optionally such that the middle box cannot use the key(s) to decrypt content), (f) receives a cypher for the decrypting the key(s) and (g) uses the key(s);
- sending, from the terminal, a request for content(s) to the middle box including an identifier(s) or pseudo-identifier(s) associated with an encryption of a content(s);
- and
- receiving from the middle box, at the terminal, the encryption of the content associated with the identifier(s) or pseudo-identifier(s).
A method for operating an oblivious content distribution network, comprising:
- establishing, at a terminal, a communication channel with a server;
- establishing, at a middle box, a communication channel with a server;
- receiving, from the server at the terminal, key(s) and one or more of pseudo-request(s), request(s) for content, content(s), pseudo-identifier(s), and encrypted content(s);
- transmitting, from the terminal to the server, key(s) and one or more of pseudo-request(s), request(s) for content, content(s), pseudo-identifier(s), and encrypted content(s);
- receiving, at the middle box from the server, one or more of pseudo-request(s), request(s) for content, content(s), pseudo-identifier(s), and encrypted content(s);
- and
- receiving, at the terminal from the middle box, one or more of pseudo-request(s), request(s) for content, content(s), pseudo-identifier(s), and encrypted content(s).
A method, at one or more terminal(s), comprising:
- sending a request for encrypted content, the request including or accompanied simultaneously, before or after, by instructions causing communication between at least one server and at least one middle box, wherein one or more of the at least one server and the at least one middle box, indirectly or directly, cause(s):
- (1) association of the encrypted content with an identifier(s) or pseudo-identifier(s),
- (2) encryption of the content;
- and
- receiving the encrypted content associated with the identifier.
An oblivious content distribution network, comprising:
- at least one terminal arranged to transmit, receive, or both key(s) and one or more of pseudo-request(s), request(s) for content, content(s), pseudo-identifier(s), and encrypted content(s);
- a server arranged to transmit, receive, or both key(s) and one or more of pseudo-request(s), request(s) for content, content(s), pseudo-identifier(s), and encrypted content(s);
- and
- at least one middle box arranged to transmit, receive, or both, one or more of pseudo-request(s), request(s) for content, content(s), pseudo-identifier(s), and encrypted content(s).
Dependencies are inferred from the claim text.