Network apparatus based on content name and method for protecting content

Patent metadata

Field	Value
Publication number	US-9344429-B2
Application number	US-201213492967-A
Country	US
Kind code	B2
Filing date	Jun 11, 2012
Priority date	Jun 9, 2011
Publication date	May 17, 2016
Grant date	May 17, 2016

Abstract

A content protection method includes generating content protection information regarding a content to be protected by a content producer, and generating a content name indicating a location of the content in content name based networks based on the content protection information. The content protection information may include at least one of marking information indicating whether the content is protected and policy information indicating a disclosure range of the content.

First claim

What is claimed is:

1. A content protection method for a network device comprising:
generating content protection information containing marking information indicating whether content is protected and policy information indicating a disclosure range of the content;
generating a content name indicating a location of the content in content name based networks, based on the content protection information;
receiving a content request message requesting transmission of the content; and
determining whether to transmit a content response message responding to the content request message based on the content protection information and a location of the content protection information,
wherein the location of the content protection information with respect to an object being protected determines a level of protection of the object.

2. The content protection method of claim 1 , wherein
the generating of the content protection information generates the content protection information while generating the content, and
the marking information indicates that the content name contains a policy regarding whether to allow or prevent access of at least one of another network device and an external network device with respect to the content.

3. The content protection method of claim 1 , wherein
the generating of the content protection information generates the policy information in the form of any of an offset, a number, a pseudo code, and a domain list, and
the policy information indicates the disclosure range in which transmission of the content is allowed.

4. The content protection method of claim 1 , wherein
the content name comprises a plurality of components, and
the content protection information comprises a single component included in the content name.

5. The content protection method of claim 4 , wherein
the generating of the content name generates the content name such that the content protection information is located within a range allowing a digital signature with respect to the content among the plurality of components.

6. The content protection method of claim 1 , wherein the generating of the content name is performed such that the content protection information is located sequentially after a component where network domain name information is located.

7. The content protection method of claim 1 , wherein the generating of the content name is performed such that the content protection information is located after a component where content name information is located.

8. The content protection method of claim 1 , wherein the generating of the content name is performed such that the content protection information is located between version information and segment information.

9. The content protection method of claim 1 , wherein the determining of whether to transmit the content response message comprises:
confirming whether content designated by the content request message is stored; and
determining whether to transmit the content response message that contains the content based on the content protection information when the content is confirmed to be stored.

10. The content protection method of claim 9 , wherein the determining of whether to transmit the content response message comprises:
confirming whether the content set for access protection based on the marking information; and
confirming whether a network device corresponding to a higher level domain is within the disclosure range based on the policy information when the content is confirmed to be set for the access protection.

11. The content protection method of claim 10 , wherein the determining of whether to transmit the content response message comprises:
determining to prevent transmitting of the content response message when the network device corresponding to the higher level domain is confirmed to be beyond the disclosure range.

12. The content protection method of claim 10 , wherein the determining of whether to transmit the content response message comprises:
determining to transmit the content response message to the network device corresponding to the higher level domain when the network device corresponding to the higher level domain is confirmed to be within the disclosure range.

13. The content protection method of claim 1 , wherein the content request message comprises at least one selected from a content name, a content object, a domain name of a content network, a domain hierarchy of the content network, and a content list included in a domain of a particular content network.

14. The content protection method of claim 1 , wherein the content name comprises at least one selected from a domain name of a content network, a unique content name, version information of a content, the content protection information, and segment information.

15. The content protection method of claim 1 , wherein the content name includes a unique identifier for identifying the content in the content name based networks.

16. The content protection method of claim 1 , wherein the content name includes a hierarchical network domain structure or content belonging to the hierarchical network domain structure.

17. The content protection method of claim 1 , wherein the disclosure range of the content includes an offset, a character code, a number code, a pseudo code, or a domain list showing a range of domains to disclose the content.

18. A network device comprising:
a content protection information generation unit to generate content protection information containing marking information indicating whether content is protected and policy information indicating a disclosure range of the content;
a content name generation unit to generate the content name indicating a location of the content in content name based networks, based on the content protection information;
a message receiving unit to receive a content request message requesting transmission of the content; and
a determination unit to determine whether to transmit a content response message responding to the content request message based on the content protection information and a location of the content protection information,
wherein the location of the content protection information with respect to an object being protected determines a level of protection of the object.

19. The network device of claim 18 , wherein the content protection information generation unit generates the content protection information while generating the content, and
the marking information indicates that the content name contains a policy regarding whether to allow or prevent access of at least one of another network device and an external network device with respect to the content.

20. The network device of claim 18 , wherein the content protection information generation unit generates the policy information in the form of any of an offset, a number, a pseudo code, and a domain list, and
the policy information indicates a disclosure range in which transmission of the content is allowed.

21. The network device of claim 18 , wherein
the content name comprises a plurality of components, and
the content protection information comprises a single component included in the content name.

22. The network device of claim 21 , wherein the content protection information generation unit generates the content name such that the content protection information is located within a range allowing a digital signature with respect to the content among the plurality of components.

Assignees

• Kim Eun Ah
• Kim Dae Youb
• Lee Byoung-Joon
• Huh Mi Suk
• Samsung Electronics Co Ltd

Inventors

• Kim Eun Ah
• Kim Dae Youb
• Lee Byoung-Joon
• Huh Mi Suk

Classifications

• G06F21/6209 Primary

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title

• H04L63/10 Primary

  for controlling access to devices or network resources · CPC title