Methods, data structures, and systems for authenticating media stream recipients

• US 20050005146A1
• Filed: 07/03/2003
• Published: 01/06/2005
• Est. Priority Date: 07/03/2003
• Status: Abandoned Application

• Current Assignee: MAUI X-Stream Incorporated
• Original Assignee: MAUI X-Stream Incorporated
• Inventors: Kryeziu, Arben
• Application Number:
  US10/613,721
• Publication Number:
  US 20050005146A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/31 User authentication

Abstract

Methods, data structures, and systems authenticate recipients of media streams. A media stream includes a self-installing and self-executing media player and media content. The media player communicates with an authentication service after it self-installs and self-executes. The media player provides authenticating information about a media stream recipient. The authentication service uses the information for authenticating the recipient for access to the media content. The authentication service provides an authentication token for an authorized recipient. Once a valid authentication token is received by the media player, the media player plays the media content for the authorized recipient.

Claims

1. A method to authenticate a media stream recipient, comprising:

automatically receiving an authentication request from a media player when a recipient attempts to use the media player to play a media stream, and wherein the media player is part of the media stream;

verifying that the recipient is authorized to play the media stream; and

sending an authentication token to the media player, if the recipient is authorized.

2. The method of claim 1 wherein the sending further comprises automatically installing the authentication token as a licensing key on a computing device of the recipient, wherein the licensing key can include licensing limitations.

3. The method of claim 1 wherein in automatically receiving, the recipient initially obtains the media player and media stream from a second recipient.

4. The method of claim 1 wherein in verifying, the recipient is verified by externally contacting a licensing service with at least one of an identity of the recipient and an identification of the media stream.

5. The method of claim 1 wherein in sending, the authentication token includes limitations that instruct the media player to self destruct the media stream upon the occurrence of an event or pre-defined time.

6. The method of claim 1 wherein in sending, the authentication token includes limitation that instruct the media player to prevent the recipient from re-streaming the media stream to a downstream recipient.

7. The method of claim 1 wherein in sending, the authentication token is at least one of a digital certificate and a digital signature.

8. A media stream structure residing on a computer readable medium, comprising:

media player logic;

media content; and

media recipient authentication logic included with the media player logic;

wherein when the media stream data structure is received by a computing device, the media player logic automatically installs itself on the computing device and executes the media recipient authentication logic before playing the media content, and wherein the media recipient authentication logic sends an authentication request to an authentication service along with the identity of a recipient of the media content.

9. The media stream data structure of claim 8 wherein the media recipient authentication logic also sends an identification of the media content to the authentication service.

10. The media stream data structure of claim 8 further comprising an authentication token, which is added to the media stream data structure if the identity of the recipient is authorized to play the media content on the computing device by the authentication service.

11. The media stream data structure of claim 10, wherein the authentication token is stored external to the media stream data structure and is identified within the media stream data structure as a pointer reference.

12. The media stream data structure of claim 8 wherein the media recipient authentication logic also sends at least one of settings associated with a computing environment of the computing device and an Internet Protocol (IP) address associated with the computing device to the authentication service.

13. The media stream data structure of claim 8 wherein the authentication service authenticates the identity of the recipient by interfacing with one or more external licensing services.

14. The media stream data structure of claim 8 wherein the media player automatically plays the media content if a valid authentication token is received from the authentication service.

15. A media content authentication system, comprising:

a distribution service for distributing media streams, wherein each media stream includes media content and a self-installing media player; and

an authentication service that subsequently communicates with each media player in order to authenticate access to recipients that attempts to play the media content.

16. The media content authentication system of claim 15 wherein each media player that self-installs contacts the authentication service immediately after it initially installs on a recipient'"'"'s computing device.

17. The media content authentication system of claim 15 wherein each media player receives an authentication token from the authentication service, if a corresponding recipient is authorized to play the media content.

18. The media content authentication system of claim 15 wherein the authentication service uses a licensing service to authorize a number of the recipients for access to the media content.

19. The media content authentication system of claim 15 wherein the authentication service receives information from each of the media players that is used to authenticate each of the recipients, and the information includes at least one of settings of a computing environment that is executing the media player, an identity of the recipient, and an identification of the media content.

20. The media content authentication system of claim 15 wherein the authentication service returns authentication tokens to each of the media players that have authorized recipients and the authentication tokens are at least one of a digital certificates, digital signatures, encrypted data, and hidden data.