Secure stream buffer on network attached storage
A network attached storage device coupled to a local network and including a network interface configured to receive digital content from a remote content provider outside the local network. The network attached storage device includes storage having a first region accessible by a user of the local network and a secure region. The network attached storage device includes a processor coupled to the storage, the processor configured to control access to the secure region of the storage based on instructions received from a remote content provider.
1. A Network Attached Storage (NAS) device configured to be coupled to a local area network, the NAS device comprising:
a network interface configured to receive digital content from a remote content provider outside of the local area network;
data storage comprising a first region that is accessible by a user of the local area network and a second region that is a secure region, wherein at least a portion of the digital content is stored on the secure region; and
a processor configured to:
negotiate parameters for establishing the secure region with the remote content provider, the parameters comprising access requirements, buffer size in the secure region, and retention time for the digital content;
establish the secure region as a buffer for a streaming device on the local area network according to the negotiated parameters, the streaming device separate from the NAS device; and
provide access to the secure region to the streaming device in accordance with the access requirements negotiated with the remote content provider.
2. The NAS device of claim 1 , wherein the secure region is inaccessible by the user without permission from the remote content provider.
3. The NAS device of claim 1 , wherein the access requirements include type of encryption and an associated decryption key.
4. The NAS device of claim 3 , wherein the processor is further configured to obtain the associated decryption key, based on a payment, from the remote content provider.
5. The NAS device of claim 1 , wherein the processor is further configured to move a received digital object stored in the secure region to the first region along with keys for accessing the digital object.
6. The NAS device of claim 1 , wherein the processor is further configured to reallocate a portion of the secure region storing a digital object to the first region.
7. The NAS device of claim 1 , wherein the processor is further configured to use virtual private network encryption.
8. The NAS device of claim 1 , wherein the processor is further configured to:
in response to a request for content received from the streaming device, negotiate with the remote content provider to receive the digital content and buffer an encrypted stream of the digital content in the secure region; and
present the digital content from the secure region to the streaming device as encrypted content.
9. A computer-implemented method of receiving, at a Network Attached Storage (NAS) device on a local area network, digital content from a remote content provider, the NAS device having a user accessible region and a secure region, the method comprising:
negotiating parameters for establishing the secure region with the remote content provider, the parameters comprising access requirements, buffer size in the secure region, and retention time for the digital content;
establishing the secure region as a buffer for a streaming device on the local area network according to the negotiated parameters, the streaming device separate from the NAS device; and
providing access to the secure region to the streaming device in accordance with the access requirements negotiated with the remote content provider.
10. The method of claim 9 , wherein the secure region is inaccessible by a user without permission from the remote content provider.
11. The method of claim 9 , wherein the access requirements include encryption and an associated decryption key.
12. The method of claim 11 , wherein the associated decryption key is obtained from the remote content provider based on receiving a payment.
13. The method of claim 9 , further comprising:
controlling an amount of data stored in the secure region based on the buffer size parameter.
14. The method of claim 9 , further comprising:
establishing a connection with the streaming device, wherein storing the digital content in the secure region comprises buffering the digital content for presentation to a user by the streaming device in a manner controlled by the remote content provider.
15. The method of claim 9 , further comprising:
moving a digital object stored in the secure region to the user accessible region along with keys for accessing the digital object.
16. The method of claim 9 , further comprising:
allocating, to the user accessible region, a portion of the secure region storing a digital object.
17. The method of claim 9 , further comprising:
using virtual private network encryption to receive the digital content from the remote content provider.
18. The method of claim 9 , further comprising:
in response to a request for content received from the streaming device, negotiating with the remote content provider to receive the digital content and buffer an encrypted stream of the digital content in the secure region; and
presenting the digital content from the secure region to the streaming device as encrypted content.
19. A Network Attached Storage (NAS) device configured to be coupled to a local area network, the NAS device comprising:
means for receiving digital content from a remote content provider outside of the local area network;
means for storing a first region that is accessible by a user of the local area network and a second region that is a secure region, wherein at least a portion of the digital content is stored on the secure region; and
a processor configured to:
negotiate parameters for establishing the secure region with the remote content provider, the parameters comprising access requirements, buffer size in the secure region, and retention time for the digital content;
establish the secure region as a buffer for a streaming device on the local area network according to the negotiated parameters, the streaming device separate from the NAS device; and
provide access to the secure region to the streaming device in accordance with the access requirements negotiated with the remote content provider.
20. The NAS device of claim 19 , wherein the negotiated parameters include type of encryption and an associated decryption key.