Digital media content distribution blocking

Patent metadata

Field	Value
Publication number	US-10230690-B2
Application number	US-201715467098-A
Country	US
Kind code	B2
Filing date	Mar 23, 2017
Priority date	Mar 23, 2017
Publication date	Mar 12, 2019
Grant date	Mar 12, 2019

Abstract

A method and system for improving a digital media content transfer blocking process is provided. The method includes detecting a request for access to digital media content from a digital media provider system. Network traffic across the network is identified and it is verified that the digital media content is comprised by the network traffic. In response, investigation platform software code is executed and a database system associated with the digital media provider system is queried. A system determines if a legitimate connection based relationship exists between a user device and the digital media provider system and the digital media content is monitored. The digital media content is determined to be unauthorized for use by said user and in response the digital media content is disabled from executing functions with respect to the user device of a user.

First claim

What is claimed is:

1. An Internet based digital media content transfer blocking improvement method comprising:
detecting, by a processor of a detection hardware device, a user request, from a user device for access to digital media content from a digital media provider system;
detecting, by said processor, said digital media content being transmitted from said digital media provider system to a network;
identifying, by said processor executing a network hardware probe of said detection hardware device, network traffic across said network;
executing, by said processor, an analytical software engine of said detection hardware device;
verifying, by said processor executing said analytical software engine, that said digital media content is comprised by said network traffic;
executing, by said processor in response to results of verifying, investigation platform software code;
querying, by said processor, a database system associated with said digital media provider system;
determining, by said processor based on results of said querying, if a legitimate connection based relationship exists between said user and said digital media provider system;
monitoring, by said processor, said digital media content;
additionally determining, by said processor based on results of said monitoring, that said digital media content is not authorized for use by said user; and
disabling, by said processor based on said determining that said digital media content is not authorized for use by said user, said digital media content from executing functions with respect to said user device of said user.

2. The method of claim 1 , wherein said disabling said digital media content comprises:
blocking, within said detection hardware device, said digital media content from reaching said user device.

3. The method of claim 1 , wherein said digital media content comprises encrypted digital media content, and wherein said method further comprises:
transmitting by said processor to said digital media provider system, a request for providing a decrypt key associated with decrypting said encrypted digital media content for said user device;
first determining, by said processor, that a specified period of time has elapsed since said transmitting; and
second determining, by said processor based on results of said first determining, that said decrypt key has not been received by said user device, wherein said disabling said digital media content is based on results of said second determining.

4. The method of claim 1 , wherein said disabling said digital media content comprises:
detecting a location of said user device;
disabling a network connection to said user device; and
notifying an authority system that said digital media content is not authorized for use by said user.

5. The method of claim 1 , further comprising:
logging, by said processor, results of said determining that said digital media content is not authorized for use by said user; and
storing, by said processor in a logging database, log data describing results of said logging.

6. The method of claim 1 , wherein said network comprises a structure comprising four independent layers.

7. The method of claim 1 , wherein said network hardware probe comprises specialized hardware and software configured to perform said identifying.

8. The method of claim 1 , wherein said verifying that said that said digital media content is comprised by said network traffic comprises:
ingesting said digital media content from said network probe; and
inspecting said ingested digital media content.

9. The method of claim 1 , wherein said digital media content is selected from the group consisting of a digital media stream and a digital media file.

10. The method of claim 1 , further comprising:
determining, by said processor based on results of said monitoring, that said digital media content comprises illicit content, wherein said disabling is further based on said determining that said digital media content comprises illicit content.

11. The method of claim 1 , further comprising:
providing at least one support service for at least one of creating, integrating, hosting, maintaining, and deploying computer-readable code in the control hardware, said code being executed by the computer processor to implement: said detecting said user request, said detecting said digital media content, said identifying, said executing said analytical software engine, said verifying, said executing said investigation platform software code, said querying, said determining, said monitoring, said additionally determining, and said disabling.

12. A computer program product, comprising a computer readable hardware storage device storing a computer readable program code, said computer readable program code comprising an algorithm that when executed by a processor of a detection hardware device implements an Internet based digital media content transfer blocking improvement method, said method comprising:
detecting, by said processor, a user request from a user device for access to digital media content from a digital media provider system;
detecting, by said processor, said digital media content being transmitted from said digital media provider system to a network;
identifying, by said processor executing a network hardware probe of said detection hardware device, network traffic across said network;
executing, by said processor, an analytical software engine of said detection hardware device;
verifying, by said processor executing said analytical software engine, that said digital media content is comprised by said network traffic;
executing, by said processor in response to results of verifying, investigation platform software code;
querying, by said processor, a database system associated with said digital media provider system;
determining, by said processor based on results of said querying, if a legitimate connection based relationship exists between said user and said digital media provider system;
monitoring, by said processor, said digital media content;
additionally determining, by said processor based on results of said monitoring, that said digital media content is not authorized for use by said user; and
disabling, by said processor based on said determining that said digital media content is not authorized for use by said user, said digital media content from executing functions with respect to said user device of said user.

13. The computer program product of claim 12 , wherein said disabling said digital media content comprises:
blocking, within said detection hardware device, said digital media content from reaching said user device.

14. The computer program product of claim 12 , wherein said digital media content comprises encrypted digital media content, and wherein said method further comprises:
transmitting by said processor to said digital media provider system, a request for providing a decrypt key associated with decrypting said encrypted digital media content for said user device;
first determining, by said processor, that a specified period of time has elapsed since said transmitting; and
second determining, by said processor based on results of said first determining, that said decrypt key has not been received by said user device, wherein said disabling said digital media content is based on results of said second determining.

15. The computer program product of claim 12 , wherein said disabling said digital media content comprises:
detecting a location of said user device;
disabling a network connection to said user device; and
notifying an auth

Assignees

• IBM

Inventors

• Cleaver James D
• Costello Sean R
• Harrer Stefan
• Plant Laurence J

Classifications

• G06F21/604

  Tools and structures for managing or administering access control systems · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/0245 Primary

  Filtering by information in the payload · CPC title

• G06F21/6227

  where protection concerns the structure of data, e.g. records, types, queries · CPC title