Configuration for multi-factor event authorization

• US 10,142,841 B2
• Filed: 07/11/2016
• Issued: 11/27/2018
• Est. Priority Date: 07/11/2016
• Status: Active Grant

• Current Assignee: Disney Enterprises Incorporated (The Walt Disney Company)
• Original Assignee: Disney Enterprises Incorporated (The Walt Disney Company)
• Inventors: Arana, Mark
• Primary Examiner(s): Ullah, Sharif E
• Application Number:
  US15/207,336
• Publication Number:
  US 20180014197A1
• Time in Patent Office: 869 Days
• Field of Search: 726 4, 726 2, 726 21, 726 36, 713150, 713163, 713181, 380255, 380264, 380276
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication
• CPC Class Codes: H04L 2463/103 applying security measure for protecting copyright
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/08 Access security

Abstract

An authorization device receives a message from a content server through a network based upon a first factor of authorization being completed by a playback device requesting playback of content associated with a user account. The authorization device may be a mobile device that is associated with the user. The authorization device may receive a user input indicating an approval of the requested playback. The authorization device may send a playback authorization message through the network to the content server. The content server may use at least a first factor of authorization such a login credential from a smart playback device or a registration credential from another type of playback device in addition to a second factor of authorization such as the playback authorization message to generate a user authentication that is provided to allow the playback device to playback the content.

Claims

1. A computer program product comprising a non-transitory computer readable storage device having a computer readable program stored thereon, wherein the computer readable program when executed on a computer causes the computer to:

receive, at an authorization device, a message from a content server through a network based upon a first factor of authorization being completed by a smart playback device requesting playback of content associated with a user account, the authorization device being a mobile device associated with a user corresponding to the user account, the authorization device being distinct from the smart playback device, the authorization device and the smart playback device being registered with the user account, the first factor of authorization comprising a login credential associated with the user account for the smart playback device, the login credential comprising a username;

receive, at the authorization device, a user input indicating an approval of the requested playback;

send, from the authorization device, a playback authorization message and a third factor of authorization through the network to the content server, the playback authorization message being based upon the approval, the playback authorization message being a second factor of authorization that is at least used by the content server in conjunction with the first factor of authorization and the third factor of authorization to generate a user authentication that is provided to the smart playback device to allow the smart playback device to playback the content, the third factor of authorization comprising a user input associated with a challenge.

2. The computer program product of claim 1, wherein the message comprises data associated with the smart playback device selected from the group consisting of:

an IP address, a geolocation, and a device id.

3. The computer program product of claim 1, wherein the modality of the user input is selected from the group consisting of:

a button selection, a speech command, photo submission, text input, and a hand gesture.

4. The computer program product of claim 1, wherein the third factor of authorization also comprises an identification factor selected from the group consisting of:

an image of a user providing the user input, an IP address of the authorization device, biometric data associated with the user, and a watermark associated with the user.

5. The computer program product of claim 1, wherein the content is selected from the group consisting of a digital screener and a movie.

6. The computer program product of claim 1, wherein the authorization device is selected from the group consisting of:

a smartphone, a tablet device, a smartTV, and a smart wearable device.

10. The computer program product of claim 1, wherein the third factor of authorization also comprises an identification factor selected from the group consisting of:

an image of a user providing the user input, an IP address of the authorization device, biometric data associated with the user, and a watermark associated with the user.

11. The computer program product of claim 1, wherein the content is selected from the group consisting of a digital screener and a movie.

12. The computer program product of claim 1, wherein the authorization device is selected from the group consisting of:

a smartphone, a tablet device, a smartTV, and a smart wearable device.

7. A computer program product comprising a non-transitory computer readable storage device having a computer readable program stored thereon, wherein the computer readable program when executed on a computer causes the computer to:

receive, at a content server, a request from a smart playback device through a network to playback content associated with a user account, the request including a first factor of authorization;

determine, at the content server, completion of the first factor of authorization, the first factor of authorization comprising a login credential associated with the user account for the smart playback device, the login credential comprising a username;

send, from the content server, to an authorization device through a network a message based upon the completion of the first factor of authorization, the authorization device being a mobile device associated with a user corresponding to the user account, the authorization device being distinct from the smart playback device, the authorization device and the smart playback device being registered with the user account; and

receive, at the content server, a playback authorization message and a third factor of authorization through the network from the authorization device, the playback authorization message being based upon an approval of the requested playback received at the authorization device, the playback authorization message being a second factor of authorization that is at least used by the content server in conjunction with the first factor of authorization and the third factor of authorization to generate a user authentication that is provided to the smart playback device to allow the smart playback device to playback the content, the third factor of authorization comprising a user input associated with a challenge.

8. The computer program product of claim 7, wherein the message comprises data associated with the smart playback device selected from the group consisting of:

an IP address, a geolocation, and a device id.

9. The computer program product of claim 7, wherein the modality of the user input is selected from the group consisting of:

a button selection, a speech command, and a hand gesture.