Media asset access control system

• US 10,346,458 B2
• Filed: 09/23/2016
• Issued: 07/09/2019
• Est. Priority Date: 09/23/2016
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Schwartz, Benjamin Aldouby, Dunham, Jeremiah, Tunall, Andrew, LaPier, Jason, Encelewski, Dustin, Abrahms, Justin, Shams, Khawaja
• Primary Examiner(s): Traore, Fatoumata
• Application Number:
  US15/275,020
• Publication Number:
  US 20180091514A1
• Time in Patent Office: 1,019 Days
• Field of Search: None
• CPC Class Codes: G06F 16/438 Presentation of query results
• CPC Class Codes: G06F 16/48 Retrieval characterised by using metadata, e.g. metadata not derived from the content or metadata generated manually
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques

Abstract

An asset storage server is provided herein that assigns related files to an asset name and assigns permissions to the asset name such that related files with unrelated names can be assigned permissions independent of the file naming convention and without requiring a user to individually set the permissions of each file. The asset storage server may also generate modified versions of original file names and index a distributed object store based on the modified versions such that related files with related names are not listed in the same partition of the distributed object store. Indexing the distributed object store based on the modified versions of the original file names may reduce data retrieval latency.

Claims

1. A computer-implemented method comprising:

as implemented by one or more computing devices configured with specific executable instructions,

receiving data associated with a first media object and a second media object to be stored, wherein the received data comprises a name of the first media object, an indication of an asset name to which the first media object is associated, a name of the second media object, an indication of the asset name to which the second media object is associated, and a set of permissions to assign the asset name, and wherein the first media object and the second media object are associated with the same content and have names in a different format;

mapping the name of the first media object to the asset name and the name of the second media object to the asset name;

mapping the set of permissions to the asset name;

storing the mapping of the name of the first media object to the asset name and the mapping of the name of the second media object to the asset name in an asset permissions data store such that a batch operation can be performed on the first media object and the second media object using the asset name;

storing the mapping of the set of permissions to the asset name in the asset permissions data store;

receiving a request from a user device to access the first media object;

querying, using the name of the first media object, the asset permissions data store to identify that the asset name is mapped to the name of the first media object;

querying, using the asset name, the asset permissions data store to retrieve the set of permissions mapped to the asset name;

determining that a user associated with the user device is authorized to access the first media object based on the retrieved set of permissions;

retrieving the first media object from an asset data store; and

transmitting the first media object to the user device to satisfy the request.

2. The computer-implemented method of claim 1 further comprising:

receiving a second request from an asset owner device to modify permissions of the asset name based on a second set of permissions;

mapping the asset name to the second set of permissions; and

storing the mapping of the asset name to the second set of permissions in the asset permissions data store.

3. The computer-implemented method of claim 1, wherein the first media object comprises one of a movie file, a television show file, a music video file, or an audio book file.

4. A system comprising:

an asset permissions data store configured to identify permissions associated with a first media object and a second media object; and

an asset storage system comprising a processor and memory, wherein the memory includes instructions that, when executed by the processor, cause the asset storage system to;

receive data associated with the first media object and the second media object, wherein the received data comprises a name of the first media object, a name of the second media object, an indication of an asset name to which the first media object and the second media object are associated, and a set of permissions to assign the asset name, and wherein the first media object and the second media object are associated with the same content and have names in a different format;

map the name of the first media object and the name of the second media object to the asset name;

map the set of permissions to the asset name;

store the mapping of the name of the first media object to the asset name and the mapping of the name of the second media object to the asset name such that a batch operation can be performed on the first media object and the second media object using the asset name; and

store the mapping of the set of permissions to the asset name,

wherein storage of the mapping of the name of the first media object to the asset name and of the mapping of the set of permissions to the asset name causes the set of permissions to govern access to the first media object.

5. The system of claim 4 further comprising an asset retrieval server, wherein second instructions, when executed, cause the asset retrieval server to:

receive a request from a user device to access the first media object;

query, using the name of the first media object, the asset permissions data store to identify that the asset name is mapped to the name of the first media object;

query, using the asset name, the asset permissions data store to retrieve the set of permissions mapped to the asset name;

determine that a user associated with the user device is authorized to access the media object;

retrieve the first media object; and

transmit the first media object to the user device to satisfy the request.

6. The system of claim 4, wherein the instructions, when executed by the processor, further cause the asset storage system to:

receive a second request from an asset owner device to modify permissions of the asset name based on a second set of permissions;

map the asset name to the second set of permissions; and

store the mapping of the asset name to the second set of permissions.

7. The system of claim 6, wherein the second request comprises a time parameter that indicates an expiration of the second set of permissions.

8. The system of claim 4, wherein the instructions, when executed by the processor, further cause the asset storage system to update permissions of the asset name in response to an occurrence of an event.

9. The system of claim 8, wherein the event comprises one of storage of a third media object, an expiration of the set of permissions, or a modification of the first media object.

10. The system of claim 4, wherein the instructions, when executed by the processor, further cause the asset storage system to execute a second batch operation to move the first media object, the second media object, and any other media object mapped to the asset name from a first storage tier to a second storage tier.

11. The system of claim 4, wherein the first media object comprises one of a movie file, a television show file, a music video file, or an audio book file.

12. The system of claim 4, wherein the set of permissions comprises at least one of read access granted to the user, write access granted to the user, delete access granted to the user, or update metadata access granted to the user.

13. A non-transitory computer-readable medium having stored thereon executable program code that directs one or more computing devices to perform operations when executed, the operations comprising:

receiving data associated with a first media object and a second media object, wherein the received data comprises a name of the first media object, a name of the second media object, and an indication of an asset name to which the first media object and second media object are associated, and wherein the first media object and the second media object are associated with the same content and have names in a different format;

mapping the name of the first media object and the name of the second media object to the asset name;

mapping a default set of permissions to the asset name in response to a determination that the received data does not indicate any permission set;

storing the mapping of the name of the first media object to the asset name and the mapping of the second media object to the asset name such that a batch operation can be performed on the first media object and the second media object using the asset name; and

storing the mapping of the default set of permissions to the asset name,

wherein storage of the mapping of the name of the first media object to the asset name and of the mapping of the default set of permissions to the asset name causes the default set of permissions to govern access to the first media object.

14. The non-transitory computer-readable medium of claim 13, wherein the operations further comprise:

receiving a second request to modify permissions of the asset name based on a second set of permissions;

mapping the asset name to the second set of permissions; and

storing the mapping of the asset name to the second set of permissions.

15. The non-transitory computer-readable medium of claim 14, wherein the second request comprises a time parameter that indicates an expiration of the second set of permissions.

16. The non-transitory computer-readable medium of claim 13, wherein the operations further comprise updating permissions of the asset name in response to an occurrence of an event.

17. The non-transitory computer-readable medium of claim 16, wherein the event comprises one of storage of a third media object, an expiration of the set of permissions, or a modification of the first media object.

18. The non-transitory computer-readable medium of claim 13, wherein the operations further comprise executing a second batch operation to move the first media object, the second media object, and any other media object mapped to the asset name from a first storage tier to a second storage tier.

19. The non-transitory computer-readable medium of claim 13, wherein the first media object comprises one of a movie file, a television show file, a music video file, or an audio book file.

20. The non-transitory computer-readable medium of claim 13, wherein the default set of permissions comprises at least one of read access granted to a user, write access granted to the user, delete access granted to the user, or update metadata access granted to the user.