Secure media streaming communication via user datagram protocol
View Patent ↗Automated processes, computing systems, computing devices and other aspects of a data processing system provide improved reliability in delivering digital media content over the Internet or a similar wide area network without sacrificing data security. Content is initially placed into a secure format (e.g., secure hypertext transport protocol (HTTPS) via transport control protocol (TCP) or the like). Prior to transmission on the network, the secure data packets are encapsulated within connectionless frames, such as user datagram protocol (UDP) frames. The client device that receives the encapsulated packets extracts the underlying secure content from the connectionless frames for further processing. The encapsulation into connectionless data frames permits client and server devices to establish effective streaming sessions while preserving the security of the underlying data.
1. An automated process executed by processor of a server device to securely provide requested content to a client device via a network, the automated process comprising:
receiving, via the network, a request message from the client device that identifies the requested content, wherein the request message is formatted in a connectionless user datagram protocol (UDP) format that encapsulates secure data formatted in a connection-based transmission control protocol (TCP) format;
processing the request message to thereby extract the secure data formatted in the connection-based TCP format from the connectionless UDP format;
authenticating the extracted secure data formatted in the connection-based TCP format by the TCP service; and
if the authenticating is successful:
obtaining the requested content;
formatting the requested content according to the connection-based TCP format;
encapsulating the requested content that is formatted according to the connection-based TCP format into data packets formatted according to the connectionless UDP protocol; and
transmitting the encapsulated data packets formatted according to the connectionless UDP protocol to the client device via the network.
2. The automated process of claim 1 , wherein the server device forwards the extracted secure data formatted in the connection-based TCP format from a local proxy client executing on the server device to a TCP server also executing on the server device.
3. The automated process of claim 2 wherein the server device forwards the requested content formatted according to the connection-based TCP format from the TCP server to the local proxy client.
4. The automated process of claim 3 wherein the local proxy client performs the encapsulating of the requested content formatted according to the connection-based TCP format into the data packets formatted according to the connectionless UDP protocol.
5. The automated process of claim 4 wherein the local proxy client communicates with the TCP server using a first proxy address that is different from a first network address used by the server device to communicate on the network.
6. The automated process of claim 5 wherein a local proxy server executed by the client device operates with a second proxy address that is compatible with the first proxy address used by the local proxy client of the server device.
7. The automated process of claim 6 wherein the client device communicates with the server device via the network using a second network address that is different from the second proxy address.
8. The automated process of claim 1 wherein the connectionless UDP protocol is a secure protocol that comprises header data describing data packets that have been transmitted but not received.
9. A server device comprising a processor, a non-transitory data storage and an interface to a network, wherein the non-transitory data storage is configured to store computer-executable instructions that, when executed by the processor, perform an automated process to securely provide requested content to a client device via the network, the automated process comprising:
receiving, via the network, a request message from the client device that identifies the requested content, wherein the request message is formatted in a connectionless user datagram protocol (UDP) format that encapsulates secure data formatted in a connection-based transmission control protocol (TCP) format;
processing the request message to thereby extract the secure data formatted in the connection-based TCP format from the connectionless UDP format;
authenticating the extracted secure data formatted in the connection-based TCP format by the TCP service; and
if the authenticating is successful:
obtaining the requested content;
formatting the requested content according to the connection-based TCP format;
encapsulating the requested content that is formatted according to the connection-based TCP format into data packets formatted according to the connectionless UDP protocol; and
transmitting the encapsulated data packets formatted according to the connectionless UDP protocol to the client device via the network.
10. The server device of claim 9 , wherein the server device forwards the extracted secure data formatted in the connection-based TCP format from a local proxy client executing on the server device to a TCP server also executing on the server device.
11. The server device of claim 10 wherein the server device forwards the requested content formatted according to the connection-based TCP format from the TCP server to the local proxy client.
12. The server device of claim 11 wherein the local proxy client performs the encapsulating of the requested content formatted according to the connection-based TCP format into the data packets formatted according to the connectionless UDP protocol.
13. The server device of claim 12 wherein the local proxy client communicates with the TCP server using a first proxy address that is different from a first network address used by the server device to communicate on the network.
14. The server device of claim 13 wherein a local proxy server executed by the client device operates with a second proxy address that is compatible with the first proxy address used by the local proxy client of the server device.
15. The server device of claim 14 wherein the client device communicates with the server device via the network using a second network address that is different from the second proxy address.
16. The server device of claim 9 wherein the connectionless UDP protocol is a secure protocol that comprises header data describing data packets that have been transmitted but not received.