METHOD AND SYSTEM FOR HTTP-BASED STREAM DELIVERY
    2.
    发明公开
    METHOD AND SYSTEM FOR HTTP-BASED STREAM DELIVERY 有权
    VERFAHREN UND SYSTEMFÜRHTTP-BASIERTE STREAM-AUSGABE

    公开(公告)号:EP2467786A4

    公开(公告)日:2017-01-11

    申请号:EP10810493

    申请日:2010-08-17

    申请人: AKAMAI TECH INC

    摘要: A method of delivering a live stream is implemented within a content delivery network (CDN) and includes the high level functions of recording the stream using a recording tier, and playing the stream using a player tier. The step of recording the stream includes a set of sub-steps that begins when the stream is received at a CDN entry point in a source format. The stream is then converted into an intermediate format (IF), which is an internal format for delivering the stream within the CDN and comprises a stream manifest, a set of one or more fragment indexes (FI), and a set of IF fragments. The player process begins when a requesting client is associated with a CDN HTTP proxy. In response to receipt at the HTTP proxy of a request for the stream or a portion thereof, the HTTP proxy retrieves (either from the archive or the data store) the stream manifest and at least one fragment index. Using the fragment index, the IF fragments are retrieved to the HTTP proxy, converted to a target format, and then served in response to the client request. The source format may be the same or different from the target format. Preferably, all fragments are accessed, cached and served by the HTTP proxy via HTTP. In another embodiment, a method of delivering a stream on-demand (VOD) uses a translation tier (in lieu of the recording tier) to manage the creation and/or handling of the IF components.

    摘要翻译: 内容传送网络(CDN)中的直播流传输包括使用记录层记录流并使用播放器层播放流。 当流以源格式接收时,记录开始。 然后将流转换成中间格式(IF),其包括流清单,一个或多个片段索引(FI)和一组IF片段。 当请求客户端与CDN HTTP代理关联时,播放器进程开始。 响应于代理对流的请求的接收,HTTP代理从数据流清单和至少一个片段索引中检索(来自存档或数据存储)。 使用片段索引,将IF片段检索到HTTP代理,转换为目标格式,然后响应客户端请求提供服务。 优选地,代理通过HTTP访问,高速缓存和服务片段。

    PROVIDING FORWARD SECRECY IN A TERMINATING TLS CONNECTION PROXY
    3.
    发明公开
    PROVIDING FORWARD SECRECY IN A TERMINATING TLS CONNECTION PROXY 审中-公开
    在EINER ABSCHLIESSENDEN TLS-PROXY-VERBINDUNG中使用贝塞斯蒂诺EINERVORWÄRTSSICHERHEIT

    公开(公告)号:EP3085008A4

    公开(公告)日:2017-06-21

    申请号:EP14871587

    申请日:2014-12-18

    申请人: AKAMAI TECH INC

    摘要: An infrastructure delivery platform provides a RSA proxy service as an enhancement to the TLS/SSL protocol to off-load, from an edge server to an external cryptographic server, the decryption of an encrypted pre-master secret. The technique provides forward secrecy in the event that the edge server is compromised, preferably through the use of a cryptographically strong hash function that is implemented separately at both the edge server and the cryptographic server. To provide the forward secrecy for this particular leg, the edge server selects an ephemeral value, and applies a cryptographic hash the value to compute a server random value, which is then transmitted back to the requesting client. That server random value is later re-generated at the cryptographic server to enable the cryptographic server to compute a master secret. The forward secrecy is enabled by ensuring that the ephemeral value does not travel on the wire.

    摘要翻译: 基础设施交付平台提供RSA代理服务,作为对TLS / SSL协议的增强,从边缘服务器卸载到外部加密服务器,解密加密的预主秘密。 该技术在边缘服务器受到损害的情况下提供前向保密,优选地通过使用在边缘服务器和加密服务器处单独实施的密码强度散列函数。 为了提供这个特定分支的前向保密性,边缘服务器选择一个临时值,并且应用密码散列值来计算服务器随机值,然后将其传送回请求客户端。 该服务器随机值稍后在密码服务器处重新生成以使密码服务器能够计算主密钥。 通过确保临时值不在线路上传输,可以实现前向保密。