IP Library Granted Patent US 9,578,125
Granted Patent B2
US 9,578,125 · App. 14/269,484 · Granted Feb 21, 2017

Systems, devices, and methods for protecting access privacy of cached content

Inventor: Abedelaziz Mohaisen (Chantilly, VA)
Assignee: Verisign, Inc.
H04L67/2842G06F21/554G06F21/556G06F21/60H04L9/005H04L63/10H04L67/32G06F2212/1052H04L2463/121
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,578,125
App. No.
14/269,484
Granted
Feb 21, 2017
Kind
B2
Abstract

Embodiments relate to systems, devices, and computer-implemented methods for preventing determination of previous access of sensitive content by receiving, from a user, a request for content at a device in an information centric network, where a cached version of the content is locally stored at the device; initiating a time delay based on a determination that the user has not previously requested the content; and transmitting the cached version of the content to the user after the time delay.

Claims (57)

1. A computer-implemented method, comprising:

receiving, at a device, a request for content from a first user device, wherein a cached version of the content is locally stored at the device;

initiating, by a processor, a time delay based on a determination that the first user device has not previously requested the content; and

transmitting the cached version of the content to the first user device after the time delay.

2. The computer-implemented method of claim 1 , further comprising determining, at the device, that the first user device has not previously requested the content.

3. The computer-implemented method of claim 1 , wherein:

a second device determines that the first user device has not previously requested the content; and

the request for the content is received via the second device with an indication that the first user device has not previously requested the content.

4. The computer-implemented method of claim 1 , wherein:

the first user device is an access point for a plurality of user devices;

communication from the access point is assigned to a port of the device;

the port is uniquely assigned to the access point; and

the determination that the first user device has not previously requested the content is based on a determination that the content has not been previously requested via the port of the device.

5. The computer-implemented method of claim 1 , further comprising determining that the content is associated with a privacy mode.

6. The computer-implemented method of claim 1 , wherein the device is part of an information centric network.

7. The computer-implemented method of claim 1 , wherein the device is an edge router relative to an access point of the first user device.

8. The computer-implemented method of claim 1 , further comprising:

receiving an initial request for the content from a second user device at the device before the content is locally cached at the device, wherein the initial request is associated with a privacy mode;

transmitting the initial request for the content to a second device;

receiving the content from the second device;

storing the cached version of the content; and

transmitting the content to the second user device.

9. The computer-implemented method of claim 8 , further comprising generating the time delay based on an expected number of nodes between the device and an original source of the content.

10. The computer-implemented method of claim 9 , further comprising:

calculating a request time delay based on a first timestamp associated with a time that the request was sent by the first user device and a second timestamp associated with a time that the request was received at the device;

calculating a retrieval time delay based on a measured time between when the initial request was transmitted to the second device and when the content was received from the second device; and

determining the expected number of nodes between the device and the original source of the content based on the request time delay and the retrieval time delay.

11. The computer-implemented method of claim 1 , further comprising generating the time delay randomly within a predetermined range.

12. A system comprising:

a processing system of a device comprising one or more processors; and

a memory system comprising one or more computer-readable media, wherein the one or more computer-readable media contain instructions that, when executed by the processing system, cause the processing system to perform operations comprising

receiving, at the device, a request for content from a first user device, wherein a cached version of the content is locally stored at the device;

initiating a time delay based on a determination that the first user device has not previously requested the content; and

transmitting the cached version of the content to the first user device after the time delay.

13. The system of claim 12 , the operations further comprising determining, at the device, that the first user device has not previously requested the content.

14. The system of claim 12 , wherein:

a second device determines that the first user device has not previously requested the content; and

the request for the content is received via the second device with an indication that the first user device has not previously requested the content.

15. The system of claim 12 , wherein:

the first user device is an access point for a plurality of user devices;

communication from the access point is assigned to a port of the device;

the port is uniquely assigned to the access point; and

the determination that the first user device has not previously requested the content is based on a determination that the content has not been previously requested via the port of the device.

16. The system of claim 12 , the operations further comprising determining that the content is associated with a privacy mode.

17. The system of claim 12 , wherein the device is part of an information centric network.

18. The system of claim 12 , wherein the device is an edge router relative to an access point of the first user device.

19. The system of claim 12 , the operations further comprising:

receiving an initial request for the content from a second user device at the device before the content is locally cached at the device, wherein the initial request is associated with a privacy mode;

transmitting the initial request for the content to a second device;

receiving the content from the second device;

storing the cached version of the content; and

transmitting the content to the second user device.

20. The system of claim 19 , the operations further comprising:

calculating a request time delay based on a first timestamp associated with a time that the request was sent by the first user device and a second timestamp associated with a time that the request was received at the device;

calculating a retrieval time delay based on a measured time between when the initial request was transmitted to the second device and when the content was received from the second device;

determining an expected number of nodes between the device and an original source of the content based on the request time delay and the retrieval time delay; and

generating the time delay based on the expected number of nodes.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 5, 2014
From: MOHAISEN, ABEDELAZIZ
To: VERISIGN, INC.
Reel/Frame 032820/0426 →
Continuity (2)
Provisional Application 61820372 · May 7, 2013
Related Publication 20140337460A1 · Nov 13, 2014