Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
  • H04N21/61—Network physical structure; Signal processing
  • H04N21/6106—Network physical structure; Signal processing specially adapted to the downstream path of the transmission network
  • H04N21/6125—Network physical structure; Signal processing specially adapted to the downstream path of the transmission network involving transmission via Internet
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
  • G06F21/101—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM] by binding digital rights to specific entities
  • G06F21/1013—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM] by binding digital rights to specific entities to locations
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q10/00—Administration; Management
  • G06Q10/10—Office automation; Time management
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q30/00—Commerce
  • G06Q30/06—Buying, selling or leasing transactions
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
  • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/12—Applying verification of the received information
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L67/00—Network arrangements or protocols for supporting network services or applications
  • H04L67/01—Protocols
  • H04L67/10—Protocols in which an application is distributed across nodes in the network
  • H04L67/1001—Protocols in which an application is distributed across nodes in the network for accessing one among a plurality of replicated servers
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L67/00—Network arrangements or protocols for supporting network services or applications
  • H04L67/01—Protocols
  • H04L67/10—Protocols in which an application is distributed across nodes in the network
  • H04L67/1095—Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
  • H04N21/21—Server components or server architectures
  • H04N21/218—Source of audio or video content, e.g. local disk arrays
  • H04N21/2181—Source of audio or video content, e.g. local disk arrays comprising remotely distributed storage units, e.g. when movies are replicated over a plurality of video servers
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
  • H04N21/21—Server components or server architectures
  • H04N21/222—Secondary servers, e.g. proxy server, cable television Head-end
  • H04N21/2225—Local VOD servers
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
  • H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
  • H04N21/231—Content storage operation, e.g. caching movies for short term storage, replicating data over plural servers, prioritizing data for deletion
  • H04N21/23116—Content storage operation, e.g. caching movies for short term storage, replicating data over plural servers, prioritizing data for deletion involving data replication, e.g. over plural servers
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
  • H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
  • H04N21/234—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs
  • H04N21/2347—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving video stream encryption
  • H04N21/23473—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving video stream encryption by pre-encrypting
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
  • H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
  • H04N21/239—Interfacing the upstream path of the transmission network, e.g. prioritizing client content requests
  • H04N21/2393—Interfacing the upstream path of the transmission network, e.g. prioritizing client content requests involving handling client requests
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
  • H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
  • H04N21/24—Monitoring of processes or resources, e.g. monitoring of server load, available bandwidth, upstream requests
  • H04N21/2405—Monitoring of the internal components or processes of the server, e.g. server load
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
  • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
  • H04N21/254—Management at additional data server, e.g. shopping server, rights management server
  • H04N21/2543—Billing, e.g. for subscription services
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
  • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
  • H04N21/258—Client or end-user data management, e.g. managing client capabilities, user preferences or demographics, processing of multiple end-users preferences to derive collaborative data
  • H04N21/25808—Management of client data
  • H04N21/25841—Management of client data involving the geographical location of the client
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
  • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
  • H04N21/266—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel
  • H04N21/26606—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM]
  • H04N21/26609—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] using retrofitting techniques, e.g. by re-encrypting the control words used for pre-encryption
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
  • H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
  • H04N21/462—Content or additional data management, e.g. creating a master electronic program guide from data received from the Internet and a Head-end, controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
  • H04N21/4622—Retrieving content or additional data from different sources, e.g. from a broadcast channel and the Internet
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N7/00—Television systems
  • H04N7/16—Analogue secrecy systems; Analogue subscription systems
  • H04N7/173—Analogue secrecy systems; Analogue subscription systems with two-way working, e.g. subscriber sending a programme selection signal
  • H04N7/17309—Transmission or handling of upstream communications
  • H04N7/17318—Direct or substantially direct transmission and handling of requests
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/2137—Time limited access, e.g. to a computer or data
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
  • H04L2463/101—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measures for digital rights management
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
  • H04L2463/102—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measure for e-commerce
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L67/00—Network arrangements or protocols for supporting network services or applications
  • H04L67/01—Protocols
  • H04L67/10—Protocols in which an application is distributed across nodes in the network
  • H04L67/1001—Protocols in which an application is distributed across nodes in the network for accessing one among a plurality of replicated servers
  • H04L67/1004—Server selection for load balancing
  • H04L67/1008—Server selection for load balancing based on parameters of servers, e.g. available memory or workload

Definitions

• Embodiments of the present invention relate to systems and processes for delivery of electronic data to recipient processors over a network and, in particular embodiments, to systems and processes for delivery of digitally encoded content files to users, such as motion picture files to rental customers over the Internet.
• LANs local area networks
• Wide area networks such as the Internet, provide additional or larger scale opportunities to deliver content.
• the Internet is used by a variety of business, organizations, governments and individuals to deliver various types of content to Internet enabled devices, including website content for displaying a website on a user's computer, as well as digitally encoded content files.
• Some Internet websites provide opportunites to download files containing digitally encoded text (such as papers, forms, patents), pictures, images or computer games.
• larger files such as video files, video games or music files may be downloaded by a user.
• a variety of content delivery services are presently provided over communication networks, such as the Internet.
• the speed and efficiency at which network users may download content over a network can be largly dependent upon the size of the content files, the number of users simultaneously using the content delivery service and the speed and efficiency of the servers and other system components used by the content delivery service.
• the delays experienced by users attempting to download content files can increase, unless the service operator provides sufficiently fast and efficent servers and other system components.
• robust servers and system components are expensive to obtain and operate.
• users may experience significant delays in downloading content files, especially during higher traffic periods and with sites that deliver large content files.
• Embodiments of the present invention described herein include network architecture systems and processes which address the above-noted industry demands.
• Particular embodiments relate to systems and process for efficient delivery of electronic content to recipient processors over a network. Further embodiments relate to such systems and processes which facilitate the delivery of relatively large content items and/or a relatively large number of content items.
• Yet further embodiments relate to such systems and processes configured for providing reliable and/or fast delivery of services and content.
• One example embodiment relates to a movie rental system and process for delivering (downloading) movie files to customers across the Internet.
• the content may comprise at least one electronic, digital copy of a movie.
• inventions of the invention may involve delivery of other types of content including, but not limited to, music files, still image files, game programs, or other software or data.
• Systems and processes according to embodiments of the present invention employ a system network of servers connected for commucation on a wide area network, such as the Internet, with recipient processors, for example, network enabled user network devices (UNDs).
• a system network architecture includes three or more layers of servers. The three layers includes a main server layer having at least one main server system, a parent server layer having a plurality of parent server systems, and an edge server layer having a plurality of edge server systems. Additional servers, such one or more source servers and one or more special function server may be included in the system.
• the edge servers are distributed throughout a region in which the system provides content delivery services to users on UNDs. Edge servers may be located in populated areas, such as in or near large cities. Parent servers may be spaced across the service region to provide support for edge servers. In one embodiment, content items are distributed to and stored on the parent and edge servers, from the main server. A copy of each content item available through the server may be stored by the main server and distributed to and stored by each parent server. The parent servers, in turn, distribute content items to edge servers, pursuant to instructions from the main server or requests from the edge servers. The edge servers need not store copies of all available content items. Instead, edge servers may store some content items, such as specific content items identified by the main server as "hot" content items, but not necessarily all other content items.
• the main server system supports a website (or other interface) accessable to users on UNDs over a network, such as the Internet.
• the website may provide an interface for allowing users to select and request content items for downloading.
• the website may also provide a means for users to purchase a license to access requested content items. Downloading every content item directly from the main server may require a very large and complex server (especially where the content items are relatively large and/or the number of content items is large). Accordingly, in some embodiments, the function of downloading content items to users is distributed among the edge servers.
• the main server When a user purchases a license for a selected content item the main server provides the user's UND with a URL (uniform resource locator) that will allow the user to connect to an edge server to download an encrypted electronic file containing the selected content item.
• the user may input the URL to the user 's web browser immediately or wait and download the content item at a later time. Alternatively, this URL can be provided transparently to the user's web browser to cause the download to begin immediately.
• the user After a user has downloaded a content item and a purchased license, the user must enable the license before accessing the content item.
• the electronic file containing the content item is encrypted and digital rights management (DRM) functions provided by the media player tool of the user's UND prevents the content from being decrypted without a valid and enabled license.
• DRM digital rights management
• the user may enable the license by opening the content item using the user's media player tool or by establishing a connection to the main website through the user's browser, similar to obtaining a license.
• the UND creates a connection to the website on the main server and the main server authenticates the license. Once the license is authenticated, the media player tool may decrypt and allow the user to access the content item.
• a multiple-layer network architecture as described herein allows content items to be stored at edge server locations distributed throughout a service region, to improve the efficiency and speed by which content items may be delivered to users in the service region.
• content management and user interaction functions including business functions associated with receiving payment and controlling access to content items, may be provided by the main server system.
• content delivery functions provided by the edge servers
• user interaction and business functions provided by the main server system
• various benefits may be achieved with respect to security, efficient operation and control.
• further security benefits may be achieved, even if the edge servers are disposed in non-secure locations or controlled by third-party service operators.
• FIG. 1 is a generalized block diagram of a network environment employed by embodiments of the present invention.
• FIG. 2 is a generalized block diagram of a network architecture according to an example embodiment of the present invention.
• FIG. 3 is a generalized block diagram of a main server system according to an example embodiment of the present invention.
• FIGS. 4-10 are schematic diagrams which, together, represent a server system architecture, according to an example embodiment of the present invention.
• FIG. 11 is a generalized block diagram of a network architecture according to another example embodiment of the present invention.
• FIG. 12 is a generalized block diagram of a network architecture according to yet another example embodiment of the present invention.
• embodiments of the invention relate to systems and processes for delivery of electronic content to recipient processors over a network.
• electronic content (or “content”) is used herein to refer to all forms of electronic information (information that may be communicated and processed in an electronic form), including, but not limited to electronic files, streamed data, or other data formats for movies, video, music or other audio, still images, game programs, application software, electronic books, episodic television content or other the like
• Embodiments of the invention may be configured to facilitate the delivery of a relatively large number of content files, data streams or other data arrangements (and/or one or more relatively large content file, data stream or other data arrangement) over a network to a plurality of recipient devices (or users).
• a system and process is configured for providing a content delivery service, for delivering such content to many users located over a relatively wide region.
• the system and process may be used as a mechamsm for a content owner or holder to distribute content to users on a network, such as the Internet.
• Systems and processes according to example embodiments of the present invention may be employed to provide a content delivery service, such as, but not limted to, content renting, selling or lending service, wherein access to electronic content as described above may be provided to users who have purchased or otherwise obtained a valid license on a network.
• a content delivery service such as, but not limted to, content renting, selling or lending service
• Other embodments may be employed in other applications in which access to content is controlled over a network.
• One example embodiment comprises a movie rental system and process for delivering (downloading) movie files to customers across the Internet.
• the content may comprise at least one electronic, digital copy of a movie.
• Other embodiments of the invention may involve delivery of other types of content including, but not limited to, music files, still image files, game programs, television content, or other software or data.
• aspects of the invention may be readily adapted to other communication networks, channels and links as well, including, but not limited to, other Internet connection interfaces (an FTP server, wireless internet interface), other wide area networks, local area networks (LANs), private networks (a network provided by an Internet Service Provider ISP for its subscribers), peer-to-peer connections and direct connections (such as a directly wired set of stations in a limited area such as a hotel, office building, educational facility or the like).
• Internet connection interfaces an FTP server, wireless internet interface
• LANs local area networks
• private networks a network provided by an Internet Service Provider ISP for its subscribers
• peer-to-peer connections and direct connections such as a directly wired set of stations in a limited area such as a hotel, office building, educational facility or the like.
• FIG. 1 A generalized representation of a network environment for example embodiments of the present invention is shown in FIG. 1.
• a system and process according to embodiments of the present invention employs a network of server and recipient processors.
• the components of the network are interconnected for communication across a wide area network 10, such as the Internet.
• the servers include at least one main server 12, a plurality of parent servers 14, and a plurality of edge servers 16. Additional servers, such as one or more source servers 18 and one or more special function server 20 may be included in the system.
• the system includes only one main server 12. In other embodiments, more than one main server 12 may be employed, for example, for load distribution or for redundance in the event that one main server fails.
• Such a system and process according to embodiments of the present invention employs a network of server and recipient processors.
• the components of the network are interconnected for communication across a wide area network 10, such as the Internet.
• the servers include at least one main server 12, a plurality of parent servers 14, and a plurality of edge servers
• servers may comprise any suitable server computer systems or other electronic processor or logic based systems programmed or configured to operate as described herein.
• the recipient processors may comprise any suitable network enabled processor, for example, but not limited to, personal computers (PCs), set-top boxes (STB), digital video recorders (DVRs), other AVHDD devices (such as those systems provided by Tivo or Replay), game consoles (such as PlayStation2), personal digital assistants (PDAs), mobile telephones, network-enabled televisions or other computer or processor system capable of receiving content over the network.
• PCs personal computers
• STB set-top boxes
• DVRs digital video recorders
• other AVHDD devices such as those systems provided by Tivo or Replay
• game consoles such as PlayStation2
• PDAs personal digital assistants
• mobile telephones network-enabled televisions or other computer or processor system capable of receiving content over the network.
• Such UNDs may include a media player tool, such as, but not limited to Windows Media Player, Real Player, Quickme or other tool for playing or otherwise accessing the downloaded content item (for example, movie).
• UNDs may include a Digital Rights Management (DRM) system as part of or in conjunction with a media player tool (or other accessing tool), as described below.
• DRM Digital Rights Management
• Functions of the DRM and further functions and operations of the UNDs and servers described herein may be implemented in any suitable manner, including, but not limited to, software running on the associated server or UND, dedicated logic circuitry or other suitable electronics included with or connected to the associated server or UND.
• the main server 12 interacts with the UNDs 22, to provide a user interface for allowing users to select content items for downloading.
• the interface comprises a main website accessable over the network 12 (for example, the Internet), to users on UNDs 22.
• the main server 12 supports the operation of the interface (for example, website), including receiving information, such as requests or selections of content items, from UNDs 22.
• the main server 12 may also store content items, such as movies, in encrypted electronic files.
• the content items (such as, movies) may be supplied to the main server 12 by content owners or holders (such as movie studios or other suitable sources), for example, from a source server 18.
• the main server 12 may be supplied with content items in other suitable manners.
• Copies of the content items are stored again on the parent servers 14. Additional copies are stored on edge servers 16 throughout a distribution region, such as throughout the United States.
• a user of a UND interacts with the main server for browsing and conducting commercial transactions.
• the main server redirects the UNDs (transparently to the users, in some embodiments) to edge servers 16 for downloading content items.
• the UNDs 22 may operate with browser or other suitable software to access the website and display website content to the user in a conventional manner of 1-nternet communications.
• the website may be displayed on the user's UND as a user interface, for allowing a user to receive user-perceptable information from the main server 12 and communicate information, such as requests for content or requests to link to additional pages or other sites, to the main server 12.
• the user may browse through website text and images describing content items, such as movies, available for downloading.
• the website may provide the user with search and other functions to assist the user in locating and selecting content items.
• the user pays a license fee, for example, by submitting payment information, such as credit card, bank card, bank account, pre-paid account or other suitable form of payment information or recordable remuneration.
• payment information such as credit card, bank card, bank account, pre-paid account or other suitable form of payment information or recordable remuneration.
• a license fee payment may be deducted automatically from such cards, accounts or other payment sources, transparent to the user.
• the license fee purchases a limited license to access the selected content item (for example, view a selected movie).
• the user may obtain a license and receive a uniform resource locator (URL) from the main website, where the URL provides the user's UND with an address or the like, to direct the user to an edge server 16 from which the user may download the selected movie.
• a license may be purchased either at the time of selecting the movie and receiving the token or at a later time, when the user desires to view the movie.
• the UND may operate a media player tool, such as, but not limited to Windows Media Player or Real Player, or other tool for playing or otherwise accessing the downloaded content item (for example, movie).
• the user may open the downloaded content file (for example, movie file) using the media player tool.
• the media player tool connects to the website to verify and enable the license.
• the license policy may allow the user to access a content item (for example, view a movie) as many times as the user desires during a predefined window of time, such as a 24-hour period, starting from when the license is enabled.
• the user or another person may access the content item (for example, movie) again by purchasing and downloading a new license, without downloading the content item (for example, movie) again.
• a system according to an embodiment of the invention can be broadly divided into three main areas: (1) the interface (or main website) where users interact with the system, (2) the network architecture and operation, including content distribution operation and content delivery operation, and (3) the security functionality restricting how users can access or view the downloaded content.
• the Interface (or Website) where users interact with the system
• the network architecture and operation including content distribution operation and content delivery operation
• the security functionality restricting how users can access or view the downloaded content.
• example embodiments of the present invention include a user interface, for allowing users on UNDs to interact with the system, through the main server 12.
• the interface comprises a main website supported by the main server 12.
• the interface may comprise any suitable interactive tool that allows communication of content item selections and other information, depending upon the embodiment.
• embodiments are described herein, primarily with reference to a website interface. However, it will be readily understood that further embodiments of the invention may employ other suitable interfaces.
• the service begins when the user connects to the main website across the Internet, using a personal computer (or other suitable processor as described above) and standard web-browsing software.
• the user may connect to the website by, for example, connecting to the address or uniform resource locator
• the main website may have a home page and a tree of numerous additional web pages interlinked with the home page at the root.
• the pages of the main website may present various information to the user, such as descriptions of content items (for example, movies), still images, clips (segments of a content item, such as a movie, taken as one contiguous segment, as it would be seen when the content is played in its normal manner, and streemed to the user's processor), and trailers (packages of clips and special audio typically used to promote a content item, such as movie trailers commonly shown as previews of coming movies, streamed to the user's processor).
• the user may browse through the website by following links within the pages of the website or by using various tools, including, but not limited to a search tool, a carousel rack presentation of movies, menus, lists and the like. While the actual sequence of events and operation of the pages of the main website may vary with different embodiments, in one example embodiment a user first connects to the website using a web-browser. The user then logs into the website with a user identifier and password or logs in as a guest. A new user can also register with the website to establish a user identifier and password.
• the main website derives information about the user's processor or computer system to provide proper support for the user's interaction (for example, to determine the type of sfreaming files to use).
• the user identifier associates the user with a customer account on the website.
• the main website has group accounts (such as a family, company, school or other organization group) where members of the group have separate identities but are tracked as a group. This grouping allows auditing of member activity by other members (for example, but not limited to, parents checking on children). Also, different members may have different access privileges (for example, but not limited to, access rights to different types of movies or amounts of money that can be charged).
• the home page presents options the user may take (for example, but not limited to, selecting content items, browse, search, rent, mark).
• the home page may also include information, such as images promoting certain content items currently selected by the service operator for promotion.
• the user When the user has found a content item (for example, a movie) that the user would like to access, the user selects a rental option and enters a commercial transaction page.
• the user may be taken to a transaction page or display to allow the user to provide purchasing information (for example, but not limited to, credit card information or a prepaid account identification) to purchase a license for the selected content item (for example, movie).
• Credit card information also may be used for age and geographical location verification. For example, if the user has access to a credit card, it may be assumed that the user either is over 18 years old or has the permission of a guardian (the credit card holder) that is over 18 years old.
• the main website may query whether the user wants to download the purchased license immediately to the machine being currently used by the user, or to download the license later to a different machine.
• the purchased license will be valid only on the machine to which the license is initially downloaded.
• security features may operate to associate the license with the selected content item (for example, movie), the machine initially receiving the license, and the media player tool on that machine. This creates a relationship between the license, the selected content item (for example, movie) and the particular machine receiving the license, so that the content item (for exmaple, movie) can only be accessed or viewed (without purchasing another license) on that particular machine, with the media player tool on that particular machine.
• the main website When a user purchases a license for a selected content item (for example, movie), the main website also provides the user's UND with a URL (uniform resource locator) that will allow the user to download the encrypted electronic file containing the content item (for example, movie) from an edge server associated with the URL.
• the user may input the URL to the user 's web browser immediately or wait and download the content item (for example, movie) at a later time.
• this URL can be provided transparently to the user's web browser to cause the download to begin immediately.
• the system authenticates that this user is currently permitted to download the content item before providing the content item to the user.
• the actual file that the user will access for download need not be stored on the physical server system associated with the main website, but rather on an edge server 16 elsewhere within the network.
• the system will resolve the URL of an appropriate edge server 16 for downloading the encrypted electronic file containing the requested content item (for example, movie) to the user's UND.
• the requested content item for example, movie
• system network architecture includes a plurality of interconnected computer or processor systems that physically store and transfer data to enable the content delivery service to operate.
• the structure and operation of the system network preferably provides a robust and efficient delivery of content to the end-user, while the end-user remains superficially unaware of the network structure and operation, perceiving most activity as though the activity occurred at a single remote location hosting the main website.
• Embodiments of the invention may employ a multiple layer architercure of servers, where the architecture is configured to provide an efficient content delivery service.
• An example embodiment of a multiple-layer architecture is shown in
• FIG. 2 wherein the system network includes three layers of servers connected by a network 10, such as the Internet.
• a network 10 such as the Internet.
• the same network 10 is shown in two locations to better illustrate the layered configuration and operation of the system.
• different networks may connect different layers.
• the three server system layers include at least one main server system 12, a plurality of parent server systems 14, and a plurality of edge server systems 16, such as described above with respect to FIG. 1.
• the example embodiment in FIG. 2 includes one main server system 12, three parent server systems 14 (identified as 14a, 14b and 14c), and a plurality of edge server systems 16.
• Other embodiments may employ other suitable numbers of main server systems, parent server systems and edge server systems.
• the layers mteract with one another to provide a caching system for the content items (for example, movies) available through the service.
• the network may also include additional components to support interaction between the layers, such as load balancing devices (not shown) for balancing loads between the user and the edge server and between the edge servers and the parent servers. Any suitable load balancing devices may be employed, including, but not limited to Global Director provided by Cisco.
• the main server system 12 supports the main website.
• the main server system 12 implements business logic for providing functions associated with user interaction, such as browsing, selecting content items, and purchasing or otherwise obtaining licenses for content items (for example, for rental of movies).
• the main server system 12 also implements the administration tools of the website, tools for authenticating download requests and security functions for enabling licenses to access content items (for example, view movies).
• the main server system 12 may authenticate download requests to ensure that the requesting user has purchased or otherwise obtained a valid license, is in a geographical region where the content item (for example, movie) can be downloaded (according to licensing agreements or other geographic restrictions that may be associated with the service or selected content), and/or is not repeatedly downloading the content item (for example, in a denial of service attack).
• the main server system 12 also may store all of the content accessible through the main website, such as content for streaming clips, trailers and other information.
• the main server system 12 may store all of the content items (for example, movies) available for licensing through the service.
• downloads to user's are handled by the edge servers 16 and distribution to the edge servers is handled by the parent servers 14.
• the network system implements a division of functions of business logic and storage between the main server and the parent and edge servers.
• the system network may also include one or more special function servers 20, for example, a third party service systems that performs geof ⁇ itermg (determining a geographic location associated with the UND, to restrict access based on geographical location of the user).
• geofiltering systems may include, for example, but not limited toTraceWareTM by Digital Island.
• TraceWareTM is a service which maintains a database of Internet Protocol (IP) addresses and physical regions associated with such addresses. Further embodiments of the invention may employ other suitable databases or systems for determining or estimating the geographic location of the user.
• the main server system 12 may connect to one or more special function servers 20 through the network 10 or through any other suitable means, including, but not limited to, direct connection or connection through a LAN or other network.
• the main server system 12 may connect to one or more source servers 18 for receiving content items (for example, movies) and or instructions relating to distribution of content items from the source server(s).
• the main server system 12 and source server(s) 18 may be connected through the network 10 or through any other suitable means, including, but not limited to, direct connection or connection through a LAN or other network.
• a content owner or holder such as a production studio, may operate a source server 18 to provide the main server system 12 with content items and, in further embodiments, instructions for controlling the distribution of the content items.
• the main server system 12 may be supplied with content items in other suitable manners, including, but not limited to, delivery on an electronic memory device or recording media, dedicated communication line or live input.
• FIG. 3 A generalized representation of a main server system 12 according to an example embodiment is shown in FIG. 3.
• the main server 12 includes or operates with an e-commerce server subsystem 30 for providing interface
• the main server system 12 may include or operate with a storage facility, such as a database 32, for storing interface (for example, website) display content, user demographic information, and other information relating to the interface (or website).
• the e-commercer server subsystem 30 may be connected to retrieve information from the database 32, as needed.
• the main server system 12 may include a license server subsystem 34, connected to the e-commerce server subsystem 30, for issuing, storing and validating licenses, as described below.
• the license server subsystem 34 may be located in a protected area in which security precautions are implemented to inhibit unauthorized access, as represented by the broken line in FIG. 3.
• some or all of the database 32 may be included in a protected area.
• the main server system 12 may include or operate with a content storage device or facility 36.
• the content storage facility 36 stores all of the content items made available through the service.
• the content storage facility 36 may be any suitable device or system capable of storing digitally encoded content items, including, but not limited to electronic, electromagnetic, optical, or electro-optical storage devices.
• Content items may be provided to content storage facility 36 from a source server 18 or any other suitable source, as described above.
• the main server may pass content items to the parent servers 14, without storing copies in a facility 36.
• the main server passes some content items to parent servers, without storing such items at the facility 36, while other content items passed to the parent servers are stored at the facility 36.
• the main server system 12 also includes a content management system (CMS) server 38, for controlling the distribution of content and instructions to parent servers 14.
• CMS content management system
• the control of content items and instructions distributed from the main server 12 to parent servers 14 may be based on instructions received from external sources, such as a source server 18.
• the parent servers 14 provide three centralized locations for data storage.
• the parent servers 14 may be operated as cache servers, for cache storage and distribution of content items to the edge servers 16.
• Three parent cache servers 14 located at selected locations across the region may be preferred for providing a content distribution service over the Internet within a region of about the size and population of the United States, wherein one parent cache server may be located near the west coast, another parent cache server may be located near the east coast and a further parent cache server may be located in the central portion of the country.
• other suitable numbers of parent cache servers 14 may be employed and distributed in any suitable manner with respect to the systems's service region.
• one of the parent cache servers 14a is designated as the primary parent and is the only parent server that directly receives content items (for example, movie files) from the main server 12.
• each of the parent cache servers 14a, 14b and 14c may connect to the main server 12 through the network 10 or other suitable connection as described above, so that the particular parent cache server designated as the primary parent may be changed.
• the designation of a particular parent server as the primary parent server may be made by instructions from the main server 12.
• the primary parent server 14a is connected to the other parent servers 14b and 14c by separate direct connections, daisy chain connection, through the network 10 or through any other suitable means, including, but not limited to, direct connection or connection through a LAN or other network.
• the primary parent server 14a distributes content items (for example, movie files) received from the main server 12 to the other parent servers 14b and 14c.
• content items for example, movie files
• each of the parent cache servers 14 may store a complete set of copies of all of the movies available through the service.
• the secondary parent cache servers 14b and 14c are supplied content items from the primary parent cache server 14a, the system may provide a greater assurance that all of the parent cache servers store the same content items at any given time, which can be desirable in contexts in which content items are updated regularly.
• the main server 12 may communicate content items and instructions directly to each of the parent servers 14.
• the edge servers 16 provide distributed storage which, preferably, is comparatively local to users. The edge servers 16 may be physically spread throughout the service region.
• Edge servers 16 may be strategically located near areas in which a high volume of usage is expected, such as on or near a college campus or associated with a college server.
• the edge servers 16 store copies of some of the content items (such as movies) available through the service.
• the edge servers 16, the parent servers 14 and/or the main server 12 determine which content items (such as movies) to store, for example, using a combination of instructions originating from the main server 12 and/or a least recently used ("LRU") algorithm.
• the edge servers also prompt authentication of a download request by the main server.
• LRU least recently used
• Examples of network architecture described herein provide a distributed storage system for caching the encrypted electronic files containing content items, such as movies.
• the system is configured to facilitate relatively large files (for example, over about 500MB), compared to a typical image file or web page accessed over the Internet. Also in further embodiments, the system is configured for supporting a large number of such large files.
• Downloading every content item directly from the main server 12 may require a very large and complex server (especially where the content items are relatively large and/or the number of content items is large). Accordingly, in preferred embodiments, the function of downloading content items (for example, movies) to users is distributed among multiple servers.
• Conventional caching approaches based on file accesses are not designed for a mix of very large and very small files and could remove inappropriate files from the cache, from the business view of the service operator.
• content items are first distributed to edge servers to be available for downloading to service customers. Once sufficient distribution has occurred, users may access the system through the interface (for example website) provided by the main server system 12, to select, submit a request and purchase (or otherwise obtain) a license for one or more content items available through the service.
• the interface for example website
• Content items may be distributed to edge servers in any suitable manner, including, but not limited to delivering to the edge servers a physical storage devices or recording media on which content items are stored, communicating content items to the edge servers over direct connections, broadcast channels, networked, other communication connections or combinations thereof.
• content items are propogated through the network architecture, from the main server system 12 to the edge servers, in accordance with instructions from the main server system 12.
• instructions and content items from the CMS server subsystem 38 are communicated to the parent servers 14.
• the main server system 12 may include or operate with a content storage facility 36.
• the content storage facility 36 preferably contains a plurality of pre-stored content items (for example, digitally encoded movie files).
• the storage facility 36 associated with the main server system 12 contains a copy of each content item (for example, movie) available for licensing through the service.
• the storage facility 36 may also contain content associated with advertisements, promotions, instructions or other information that may be communicated through the network to other servers and user UNDs.
• the main server system 12 may obtain content items from other sources, such as source server 18, to store in facility 36 or to pass to the network without- storing.
• the content items may be received and/or stored in an encrypted form.
• the main server 12 provides copies of content items to the parent servers 14.
• the main server communicates such content items to a designated primary parent server 14a, which passes appropriate content items on to the other (or secondary) parent servers 14b and 14c, as described above.
• Each parent server 14 includes or operates with a storage facility (not shown) for storing a plurality of content items received form the main server (or from other suitable sources), such as described above with respect to storage facility 36.
• all content items available for license through the service are communicated to and stored on each parent server 14.
• the parent servers 14 provide copies of content items to edge servers 16.
• the edge servers 16 may be divided into groups, with each parent server 14 pre- assigned to provide content items to a respective group of edge servers.
• the edge servers 16 with which a given parent server 14 communicates to provide content items may be determined by other suitable means, including, but not limited to, load distribution systems that determine servers based on proximity and/or current traffic levels, such as Best Distributor Selection BDI produced by Digital Island.
• the edge servers 16 with which a given parent server 14 communicates may be assigned by instructions provided by the main server system 12.
• the edge servers 16 include or operate with storage facilities (not shown) for storing a plurality of content items received from parent servers (or from other suitable sources), such as described above with respect to storage facility 36.
• each edge server 16 stores less than all of the content items stored by the parent servers (or by its assigned parent server).
• the determination of which content items to store in each edge server may be based, at least in part, on instructions from the main server system 12.
• the main server 12 publishes instructions that effectively label one or more content items (for example, movies) as "hot,” indicating that the hot content item(s) are to remain in storage on each edge server.
• Content items (for example, movies) that are not hot may be referred to as "cold,” though the cold content items need not be specifically labeled cold.
• the main server 12 may issue instructions that classify content items in more than two ("hot” and "cold") levels. Instructions from the main server 12 may classify content items in many different levels or classifications (such as, level 1, level 2, level 3 ... level n), where each level or classification is associated with a different set of edge servers. Thus, for example, an instruction classifying a content item as level 1 may cause that content item to be stored in all of the edge servers, while an instruction classifying another content item as a level 2 may cause that content item to be stored in a defined set (but less than all) of the edge servers.
• level 1 may cause that content item to be stored in all of the edge servers
• an instruction classifying another content item as a level 2 may cause that content item to be stored in a defined set (but less than all) of the edge servers.
• an instruction classifying yet another content item as a level 3 may cause that content item to be stored in another defined set (but less than all) of the edge servers, and so on.
• the classification instruction instead of the main server 12 issuing a classification instruction for a content item separate from the associated content item, the classification instruction may be included with the content item.
• a parent server 14 provides a copy of a content item (for example, a movie file) to an edge server 16, when the edge server 16 requests the content item.
• An edge server 16 may place a request to a parent server when the edge server 16 receives a request for the content item (for example, the movie file) from a user and the edge server determines that the requested content item is not aheady stored on the edge server. Additionally, or alternatively, the edge server 16 may place a request when the edge server receives instructions from the main server 12 or a parent server 14, instructing the edge server to store a specified content item (for example, a movie file) and the edge server determines that the specified content item is not already stored on the edge server.
• the main server 12 may issue instructions, which may be based on marketing or operational considerations, to have some content items (for example, some movies) always available in some or all edge cache servers 16, despite use patterns.
• the edge servers 16 may receive instructions containing lists of "hot” content items (for example, "hot” movies) or other classifications relating to content items that should be stored on the respective edge servers.
• the main server 12 publishes an XML document containing a list of all content items (for example, movies) available on the main server 12, with some content items marked as "hot”. Additional parameters may also be included, such as geographic restrictions (so that a content item, such as a movie, that is not available for download in a region will never be stored on edge servers in that region).
• the main server 12 publishes instructions to the parent servers 14 and the edge servers 16 and the parent servers republish instructions to edge servers.
• each edge server 16 may determine whether or not its associated storage facility is storing all of the appropriate content items and, if not, the edge server may request appropriate content items from a parent server.
• the content items stored on each edge server may be tracked by the parent servers (for example, the primary parent server) or by the main server, such that determinations as to which content items to load onto the edge servers may be made by the parent or main server.
• Algorithms or other suitable means, such as LRU analysis may be used in the determination of which content items to store at the various edge servers.
• cache storage in the edge servers may be controlled by dividing the storage facility associated with each edge server 16 into two zones: one zone for content items available for license (for example movies), and the other zone for other files.
• Caching by edge servers 16 in the content item zone follows a combination of server instructions (for example, relating to which content items are "hot") and LRU analysis.
• the edge servers 16 do not remove the hot content items (for example, hot movies) from storage in their content item zones, but the edge servers may add and remove cold content items (for example, cold movies) from storage according to demand and an LRU scheme.
• Data stored in the other zone follows a typical LRU algorithm.
• content items (such as encrypted files of digitally encoded data) for licensing through a content delivery service are supplied to the main server 12 from a source server 18 or other suitable source. All content items available for license through the service are stored at a memory facility associated with the main server 12. Content items are communicated from the main server 12, through the network 10, to a primary parent cache server 14a. The primary parent cache server 14a communicates the content items to other parent cache servers 14b and 14c. A copy of each content item may be stored in a storage facility associated with each parent cache server.
• the parent cache servers 14 communicate some or all of the content items to various edge servers 16, initially based on instructions provided from the main server 12 and may later be based on a combination of such instructions and other information.
• the instructions from the main server 12 may employ a classification system with multiple levels, such as “hot” and “cold,” where content items classified as “hot” are communicated to and stored by all edge servers.
• Other (“cold") content items are communicated to and stored by an edge server at later times when user requests for such content items are sent through the edge server and/or based on determinations made from other information.
• Such other information may include information obtained from an LRU algorithm, records of user activity (such as historical data relating to on-line activities of a user or groups of users), user input (such as user-entered preferences), or the like.
• users may access the system through the interface (for example, a main website as described above) supported by the main server system 12.
• the interface for example, a main website as described above
• users may search and select content items and submit a request to download content items, and purchase (or otherwise obtain) a license for content items.
• the user when the user purchases a license for a content item (for example, a movie), the user receives a URL containing a token.
• the URL may be provided to the user upon the user selecting a content item (for example, movie).
• the user still must purchase a license (and the license must be enabled) before the user is able to access (for example, decrypt or view) the selected content item (for example, movie).
• the user may access content items through a media player or other suitable tool for playing or otherwise accessing digitally encoded content (such as movie files).
• a URL provided to the user will be resolved by a DNS (domain name server) to connect the user to the appropriate edge server 16 in the system network for the download request. More precisely, the DNS resolves the URL to indicate the system network and a load balancing device directs the request to the appropriate edge server 16.
• DNS domain name server
• the URL may include address information for a specific edge server 16 to which the user's request is to be sent.
• the edge server 16 Upon receiving a user's request, the edge server 16 sends a query to the main server 12 to authenticate the request before providing the selected content item (for example, movie) to the user. In one embodiment, the edge server 16 sends the query even before checking its associated storage facility for the content item (for example, movie). Accordingly, the edge server itself need not authenticate the request and, thus, need not include the software for performing that function. In this manner, the authentication function may be centralized with the main server 12, for better security and efficient administration. However, other embodiments may employ edge servers 16 with authentication functionality.
• the query to the main server 12 may include information identifying the requested content item (for example, movie), the requesting user, and the user's current IP address.
• the main server may check its records (for example, stored in database 32) to determine or verify that the requesting user has purchased a license for the requested content item (for example, movie).
• the main server 12 passes the user's IP address to the TraceWareTM service, or other suitable geographic locator system.
• the geographic locator system estimates the user's geographical location, for example, by comparing the supplied content item (for example, movie).
• IP address with a database.
• the geographic locator system compares the resulting location with rules previously supplied by the main server 12 and responds to the main server with data indicating whether the download is to an allowable location.
• the main server 12 receives data simply identifying a geographical region associated with the user's IP address from the geographic locator system. Then software associated with the main server 12 determines whether or not a user's IP address is within a geographic region to which the requested content may be delivered, without violating contractual obligations or other restrictions.
• geographic restrictions are implemented by the system such that only users in the United States are allowed to download content items (for example, movies).
• the main server compares the token in the URL to a corresponding record maintained by the main server 12 that tracks the number of times this URL (or token) has been used to attempt to download the content item.
• the main server 12 may determine whether or not the number of attempts have exceeded a pre-defined threshold. For example, a URL (or token) can be used three times before becoming invalid, to allow for download failures. Other maximum use limits may be employed in other embodiments. After exceeding the limit, the token is disabled and the URL is no longer valid. A URL with a disabled token will not be authenticated by the main server 12.
• the network may authenticate a request to download a content item (such as a movie), for example, by verifying that: (a) the user has purchased a license for the requested content item, (b) the user is in a geographical region that is allowed to download the requested content item, and (c) the user is not attempting to download the content item more times than is reasonable. If one or more of these checks fail, the main server 12 denies the authentication and instructs the edge server not to proceed with the download of the content item (for example, movie). The user may be displayed a message or otherwise directed to contact a customer representative for assistance in proceeding. If, on the other hand, authentication is successful, the selected content item(s) may be downloaded to the user's UND.
• a content item such as a movie
• content items such as movies, available through the service may be encrypted in accordance with any suitable encryption scheme.
• the encryption scheme may be changed periodically to inhibit piracy. For example, the encryption scheme may be changed every 30 days.
• a user accesses the electronic file containing the content item (for example, movie file) through a media player tool or other suitable tool on the UND 22.
• the media player tool includes digital rights management (DRM) technology to control access to the encrypted content according to the license provided by the main server 12.
• DRM digital rights management
• the license may be considered both a legal concept and a literal object, an electronic data file.
• the user when a user purchases a license for a content item (for example, rents a movie) at the main website, the user is purchasing a license to access the content (for example, view the movie) under certain restrictions.
• the license may include a restriction that the user can only access the content item (for example, view the movie) on a single UND.
• the license may include a restriction that the user can only access the content item during a predefined window (for example, a 24-hour window).
• the user may be provided with a choice between downloading the purchased license immediately to the UND being currently used by the user, or downloading the license later to a different machine.
• This choice may be presented as selectable options, for example, on an interface (such as a website as described above). If the user selects to immediately downloads the license, the license will be bound to the current UND and media player tool installed on that machine. If the user were later to place a copy of the downloaded content item (for example, movie) and license on a different machine, the license would not be valid and could not be enabled to allow the user to access the content item (for example, view the movie). If the user wants to access the content item (for example, view the movie) on a different machine from the machine that the user is currently using, the user may download the license later directly to that other machine.
• an interface such as a website as described above.
• the user may use either the media player tool or a web-browser to connect to the main website and request the purchased license.
• the user simply attemps to access the content item (for example, open the movie for viewing).
• the DRM of the media player tool determines whether a license has been provided and, if not, recognizes that the user needs a license. In that event, the media player tool connects the user to the main website to download the license.
• the main website will query whether the user would like to purchase a license. In this manner, distribution of copies of the encrypted content files among users and potential users may be encouraged by the service operator, because the content cannot be accessed (the movies cannot be viewed) without a valid purchased license.
• the downloaded license may be associated with the downloaded content item (for example, a movie) and the media player tool. If the media player tool cannot find the license or the content item (for example, movie), the user may manually direct the media player tool to the local storage location containing the license or content item (for example, movie).
• a content item for example, movie
• a purchased license the user must enable the license before accessing the content item (for example, viewing the movie).
• the DRM of the media player tool recognizes the differences among an enabled license, a license not yet enabled, and the lack of a license.
• the user may enable the license by opening the content item (for example, movie) using the user's media player tool or by establishing a connection to the main website through the user's browser, similar to obtaining a license.
• the media player tool creates a connection to the main website and the main website authenticates the license.
• the main website confirms that: (a) the license has been purchased, (b) the license matches the content item (for example, movie) being accessed, (c) the license matches the machine accessing the content item (for example, movie), and (d) the license matches the media player tool accessing the content item (for example, movie).
• the license includes identifying information that indicates the content item (for example, movie) associated with the license, the processor or computer system to which the license was downloaded, and the media player tool installed on the device to which the license was downloaded. If the license is valid, the main website enables the license.
• the user may access the content item (for example, view the movie) through the media player tool, in accordance with the license policy.
• the license policy provides that the user may access the content item (for example, view the movie) an unlimited number of times, in whole or in part, during a specified period, such as, but not limited to, a 24-hour period, starting from when the license is enabled. At the end of the specified period, the license expires and is no longer enabled.
• the specified period may be a set number of days, one week, one month, one year or any suitable time period or designated time intervals.
• the license policy may allow only a single access or a specified number of accesses during the specified period, rather than an unlimited number of accessses. In such embodiments, once the specified number of accesses has occured, the license expires and is no longer enabled. In a futher embodiment, the user may re-activate a disabled license by connecting to the main website and paying a reactivation fee or a new licesne fee. In yet further embodiments, the user must purchase and obtain a new license to access a content item, once the previously purchased license expires.
• the user may copy the encrypted file and store that copy on another computer, but will need a valid license to access the file (for example, view the movie) on that second computer. If the user attempts to access the content (for example, view a movie) for which the user does not have a valid license, the media player tool creates a connection to the main website and the main website queries whether the user would like to purchase a license. In preferred embodiments, the main website server determines whether the user has already purchased a license, but has not yet downloaded the purchased license. If so, then the main website may query whether the user wants to download the purchased license at this time.
• FIGS. 1 and 2 are shown with a single main server system 12, further embodiments of the invention may employ multiple main servers systems. For example, multiple mirror sites of the main servers may be spaced over a service region, to share or distribute the main server's workload over the multiple main servers.
• FIGS. 4-10 An example embodiment of a main server architecture scheme is shown in the drawings of FIGS. 4-10, wherein interconnected lines on those drawings are identified with corresposponding reference numbers.
• the example main server architecture shown in FIGS. 4-10 includes two main server systems having similar architectures, one of which is represented in FIGS. 4-6 and the other is represented in FIGS. 8-10. An interconnection between the two main server systems is represented in FIG. 7.
• the two main server systems may be employed simultaneously, for example, to balance user load.
• one main server system may be employed as a primary main server, while the other main server system may be employed as a secondary server system to be used in the event that the primary server system becomes inoperative or is unaccessable.
• Each main server system is connected to an internet Service Provider (ISP). Multiple ISP connections may be provided at each main server, for example, to provide redundancy, in the event that one of the ISPs becomes inoperative or inaccessable.
• ISP internet Service Provider
• each main server in the illustrated embodiment includes connections 44 to three ISPs.
• the main server systems may include or operate with suitable routers and load balancing devices.
• router and load balancing devices are shown, generally, with reference number 46.
• load balancing devices may receive control instructions from network administators, as represented by reference number 48.
• the router and load balancing portion of the system may include multiple devices and multiple paths for redundancy.
• two routers devices are provided, where each router device has two ISP connections and two output paths. Thus, in the event that one device or path becomes inoperable or inaccessable, the other device or path may be employed.
• connection lines from each router portion 46 leads to a load balancer 50 (in FIG. 5), for directing information to or from the appropriate path.
• the load balancer 50 of each main server system (in FIG. 5 and FIG. 9) is connected to at least one switch segment 52.
• the switch segment includes a firewall line between the public side of the network and the non-public side. Multiple switch segments 52 may be used for redundancy and/or load balancing. In the illustrated embodiment, two switch segments 52 are employed in each main server system.
• the switch segments 52 are each connected to at least one media server for providing website content for displaying on the main website.
• the media servers include a first set of Windows Media Servers 54 and a second set of Real Networks Servers 56.
• the media servers 54 and 56 may be connected to a switch segment 58 for distributing information (such as backup content, advertisements or other website information) between the media servers and a shared storage system shown in Fig. 6.
• the other two connection lines from each router portion 46 (lines C and D in FIG. 4 and lines L and M in FIG. 8) lead to a further load balancer 60 (in FIG. 6), for directing information to and from the appropriate path.
• the load balancer 60 of each main server system (in FIG. 6 and FIG. 7) is connected to at least one switch segment 62.
• the switch segment 62 may include a firewall line between the public side of the network and the non-public side.
• switch segments 62 may be used for redundancy and/or load balancing. In the illustrated embodiment, two segments 62 are employed in each main server system.
• the load balancer 60 may also be connected to the switch segments 52, as represented by lines G and H.
• the load balancer 50 may be connected to the switch segments 62, as represented by lines E and F. In this manner, each load balancer 50 and 60 may direct information to any of the switch segments 52 and switch segments 62, for example, to provide for backup redundancy and or load balancing with the other director.
• Each switch segment 62 is connected to at least one (and preferably multiple) e-commerce server 64.
• the main server system need not be dedicated to providing a single content licensing or delivery service.
• some e-commerce servers 64 of the main server system may be designated for use with other service applications, as represented by the box 66.
• Each of the e-commerce servers 64 employed in the presently described content licensing or delivery service is connected, through a further firewall segment 68 to various switch segments 70 and for ther servers 72.
• the further servers 72 are connected, through yet further firewall segments 74 to license servers 76 and customer servers 78.
• the customer servers 78 handle returning customer information and user history information.
• Network administrators, with appropropriate access rights, may connect, for example, through firewall segment 68, from a management section 80. Storage of backup content for disaster recovery may be provided by a shared storage system 82. As shown in FIGS.
• a content owner or holder (source server) 84 may connect throuhg firewall segment 68, for example, to provide or update content, including content items to be licensed through the server and/or website content, or to provide instructions relating to content items.
• source server may connect throuhg firewall segment 68, for example, to provide or update content, including content items to be licensed through the server and/or website content, or to provide instructions relating to content items.
• multiple redundant paths and devices are provided to, for example, improve reliability and or efficiency of the main server system.
• mulitple firewall layers and other separations of content-end and business-end processes are implemented for improved security. It will be understood that FIGS. 4-10 show one representative example of a main server architecture. Other embodiments of the invention may employ other suitable main server architectures and schemes.
• the network architecture shown and described above with reference to FIG. 2 includes a single group of interconnected parent servers 14 in the parent server layer.
• one or more main servers 12 may communicate with multiple groups of connected parent servers, where each group includes a primary parent server 14a and at least one secondary parent server 14b, as shown in FIG. 11.
• the network architecture embodiment shown in FIG. 2 includes three server layers comprising a main server layer, a parent server layer and an edge server layer, other embodiments may employ more than three layers.
• the network may include multiple layers of parent servers 14, as shown in FIG. 12, wherein a first parent server layer 90 may comprise a plurality of parent servers 14, each of which services one or more parent servers in a second parent server layer 92.
• each layer may be arranged in one or more groups, with each group having a primary parent servers connected to one or more secondary parent servers, as described above.
• each respective parent server in the first parent server layer 90 services a respective one of the parent server groups in the second layer 92.
• multiple parent servers in the first parent server layer 90 may service any of the parent servers in the second parent server layer 92, for redundancy and/or load balancing.
• Discounted content items for example, movie files
• discounts may be provided to the user who distributes a copy to a second user, provided the second user purchases a license to view that copy.
• the second user may be provided with a discount or coupon to encourage the second user to purchase a license for the received copy.
• download or distribution arrangements may also be employed, such as downloading through an affiliate's website and network (for example, but not limited to, Amazon.com). Broadcasts or multicasts may also be employed, through the Internet or more conventional broadcasting, such as satellite or cable. Further direct distribution embodiments include supplying an encrypted copy of a content item (for example, movie) on a CD-ROM as a promotional with a new ISP or magazine subscription, or a computer or other product purchase. A CD-ROM may be given away as a promotional to target users, such as college students.
• new laptop or desktop computers or electronic storage devices could be pre-loaded with one or more encrypted content items, such as movies, for example, stored on a hard drive.
• a library of multiple encrypted movies may be placed on a CD-ROM style disc.
• various system and process embodiments according to the present present invention may be employed to provide a content owner or holder with a mechanism for allowing users to access the content through a network. While a preferred example model for the system and process is a movie rental system for downloading movie files to customers across the Internet, other embodiments may involve delivery of other types of content including, but not limited to, music files, still image files, game software, or other software or data. Moreover, other embodiments may employ other wide area or local area networks. Thus, the references to movie files and movie information in the above-described representative examples do not limit the inention to that context of use. Aspects of the invention described above may be employed in the delivery, rental, sale or promotion of other types of content over a network.
• various business processes are described herein for providing revenue to a service operator, content supplier or owner, and various third-party sites.
• the service operator receives revenues from user's purchasing licenses. Such revenues may be shared with content suppliers or owners of content for which licenses have been purchased.
• Various promotional mechanisms described herein may be employed to enhance the user's experience and encourage usage of the system, including, but not limited to coupons, discounts, gift certificates, promotional trailers and clips, promotional images on the website, and the like.

Landscapes

• Engineering & Computer Science (AREA)
• Signal Processing (AREA)
• Multimedia (AREA)
• Databases & Information Systems (AREA)
• Business, Economics & Management (AREA)
• Computer Security & Cryptography (AREA)
• General Engineering & Computer Science (AREA)
• Computer Networks & Wireless Communication (AREA)
• Theoretical Computer Science (AREA)
• Strategic Management (AREA)
• Computer Hardware Design (AREA)
• General Physics & Mathematics (AREA)
• Physics & Mathematics (AREA)
• Finance (AREA)
• Entrepreneurship & Innovation (AREA)
• General Business, Economics & Management (AREA)
• Economics (AREA)
• Software Systems (AREA)
• Accounting & Taxation (AREA)
• Marketing (AREA)
• Computing Systems (AREA)
• Human Resources & Organizations (AREA)
• Operations Research (AREA)
• Data Mining & Analysis (AREA)
• Computer Graphics (AREA)
• Quality & Reliability (AREA)
• Tourism & Hospitality (AREA)
• Development Economics (AREA)
• Technology Law (AREA)
• Management, Administration, Business Operations System, And Electronic Commerce (AREA)
• Information Transfer Between Computers (AREA)
• Storage Device Security (AREA)
• Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
• Television Signal Processing For Recording (AREA)
• Cephalosporin Compounds (AREA)
• Television Systems (AREA)

Applications Claiming Priority (7)

Publications (2)

Family

ID=27393522

Family Applications (2)

Family Applications Before (1)

Country Status (7)

Families Citing this family (76)

Citations (3)

Family Cites Families (31)

• 2001
  • 2001-04-06 AU AU2001247944A patent/AU2001247944A1/en not_active Abandoned
  • 2001-04-06 WO PCT/US2001/011381 patent/WO2001078303A1/fr active Search and Examination
  • 2001-04-06 WO PCT/US2001/011424 patent/WO2001078304A1/fr active Application Filing
  • 2001-04-06 AU AU2001253243A patent/AU2001253243B2/en not_active Expired
  • 2001-04-06 WO PCT/US2001/011452 patent/WO2001077783A2/fr active Application Filing
  • 2001-04-06 AU AU2001255264A patent/AU2001255264B2/en not_active Expired
  • 2001-04-06 EP EP01926726A patent/EP1277305B1/fr not_active Expired - Lifetime
  • 2001-04-06 JP JP2001574572A patent/JP4920850B2/ja not_active Expired - Lifetime
  • 2001-04-06 JP JP2001575040A patent/JP2004507124A/ja active Pending
  • 2001-04-06 CA CA2405478A patent/CA2405478C/fr not_active Expired - Lifetime
  • 2001-04-06 EP EP01928403A patent/EP1277101A4/fr not_active Withdrawn
  • 2001-04-06 AU AU5324301A patent/AU5324301A/xx active Pending
  • 2001-04-06 AT AT01926726T patent/ATE525824T1/de not_active IP Right Cessation
  • 2001-04-06 AU AU5526401A patent/AU5526401A/xx active Pending
  • 2001-04-06 CA CA2405489A patent/CA2405489C/fr not_active Expired - Lifetime
• 2003
  • 2003-07-22 HK HK03105266.3A patent/HK1053027A1/zh unknown
  • 2003-07-22 HK HK03105267.2A patent/HK1052998A1/zh unknown

Patent Citations (3)

Also Published As

Similar Documents

Legal Events