Remotely accessing protected files via streaming

• US 20070039055A1
• Filed: 08/11/2005
• Published: 02/15/2007
• Est. Priority Date: 08/11/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Plastina, Daniel, Flaks, Jason, Bhatt, Sanjay, Walter, James, Dooley, James, Oliveira, Eduardo, Schiefelbein, William
• Granted Patent: US 7,681,238 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 16/40 of multimedia data, e.g. slideshows comprising image and additional audio data retrieval of still image data G06F16/50; retrieval of audio data G06F16/60; retrieval of video data G06F16/70
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4143 embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/4788 communicating with other users, e.g. chatting arrangements for providing for computer conferences, e.g. chat rooms, to substation in data switching networks H04L12/1813; distributed application using peer-to-peer [P2P] networks H04L67/104
• CPC Class Codes: H04N 21/6408 Unicasting
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/173 with two-way working, e.g. subscriber sending a programme selection signal

Abstract

A source device permits a user of a remote device to access a protected file on the source device when the user of the remote device has a right to access the protected file. The user locates the protected file on the source device using the remote device and accesses the protected file using a media player on the remote device. The media player constructs a path by which the source device streams the protected file. The remote device responds to an authentication request from the source device that the user of the remote device has a right to access the protected file. The user is authenticated to confirm that the user of the remote device has a right to access the protected file. The protected file is streamed to the remote device via a path constructed by the remote device.

Claims

1. A method in which a user accesses from a remote device a protected file on a source device wherein the user has a right to access the protected file, the method comprising:

Using the remote device by the user to locate the protected file on the source device;

Using the remote device by the user to attempt to access the located, protected file via a media player on the remote device;

Constructing by the media player a path by which the source device streams the protected file;

Responding by the remote device to an authentication request from the source device that the user of the remote device has a right to access the protected file; and

Receiving by the remote device the protected file streamed over the constructed path via the media player.

2. The method of claim 1 wherein using the remote device to locate comprises one or more of the following:

browsing the source device by the remote device to locate the protected file on the source device, or searching the source device by the remote device to locate the protected file on the source device.

3. The method of claim 1 wherein responding to the authentication request comprises:

Using an interface of a communication module on the source device to parse the path; and

Using the interface of the communication module to authenticate the user.

4. The method of claim 3 wherein using the interface of the communication module on the source device to parse the path comprises:

Using a media delivery application (MDA) on the source device to generate an authentication event including a transformed URL; and

Using the interface of the communication module on the source device to parse the transformed URL.

5. The method of claim 3 wherein using the interface of the communication module to authenticate the user comprises:

Passing via the MDA the authentication event including the parsed path to the interface of the communication module on the source device;

Generating by the communication module on the source device a challenge via a security support provider interface (SSPI) and returning the challenge to the MDA;

Sending by the MDA the generated challenge to the media player;

Sending by the media player to the MDA a response to the challenge;

Sending by the MDA the authentication event including the response to the interface of a module on the source device;

Obtaining by the communication module on the source device an access token;

Confirming authentication of the user by the communication module on the source device to the MDA; and

Streaming by the MDA the content of the file to the media player.

6. The method of claim 1 further comprising editing data associated with the file via an SMB path.

7. The method of claim 1 wherein responding to the authentication request comprises:

Using a media delivery application (MDA) on the source device to generate an authentication event including a transformed URL;

Using the interface of the communication module on the source device to parse the transformed URL;

Passing via the MDA the authentication event including the parsed URL to the interface of module communication on the source device;

Generating by the communication module on the source device a challenge via a security support provider interface (SSPI) and returning the challenge to the MDA;

Sending by the MDA the generated challenge to the media player;

Sending by the media player to the MDA a response to the challenge;

Sending by the MDA the authentication event including the response to the interface of the communication module on the source device;

Obtaining by the communication module on the source device an access token;

Sending by the MDA the authentication event including the access token to the connect protocol;

Confirming authentication of the user by the communication module on the source device to the MDA; and

Streaming by the MDA the content of the file to the media player.

8. The method of claim 1 wherein responding to the authentication request comprises:

Generating an authentication event including a transformed URL;

Parsing the transformed URL;

Generating a challenge to the media player;

Sending by the media player a response to the challenge;

Obtaining an access token;

Using the access token to confirm authentication of the user; and

Streaming the content of the file to the media player.

9. A system for permitting a user of a remote device to access a protected file stored on a source device, said system comprising:

an interface for receiving a request from the user of the remote device for accessing the protected file on the source device;

an authentication component for determining the permission based on the request by authenticating that the user of the remote device has a right to access a protected file; and

a streaming component for streaming the protected file in response to the request to the remote device via a path constructed by the remote device.

10. The system of claim 9 wherein the interface is configured to perform one or more of the following:

browses the source device to locate the protected file on the source device, or searching the source device by the remote device to locate the protected file on the source device.

11. The system of claim 9 wherein the streaming component comprises using an interface of a communication module on the source device to parse the constructed path included in the request and using the connection protocol to authenticate the user.

12. The system of claim 11 wherein the streaming component uses the connection protocol on the source device to parse the constructed path by:

using a media delivery application (MDA) on the source device to generate an authentication event including a transformed URL; and

using the interface of the communication module on the source device to parse the transformed URL.

13. The system of claim 11 wherein the streaming component uses the connect protocol to authenticate the user by:

passing via the MDA the authentication event including the parsed path to the interface of the communication module on the source device;

generating by the communication module on the source device a challenge via a security support provider interface (SSPI) and returning the challenge to the MDA;

sending by the MDA the generated challenge to the remote device;

sending by the remote device to the MDA a response to the challenge;

sending by the MDA the authentication event including the response to the interface of the communication module on the source device;

obtaining by the communication module on the source device an access token;

confirming authentication of the user by the communication module on the source device to the MDA; and

streaming by the MDA the content of the protected file to the remote device.

14. The system of claim 9 wherein constructed path being associated with the file is an SMB path.

15. A data structure defining a streaming URL constructed by a remote device for use by the remote device to receive a protected file streamed over the URL by a source device, wherein the user of the remote device has a right to access the protected file, said data structure comprising:

A streaming protocol by which the file is streamed;

A path linking the remote device and the source device over which the streamed file is provided; and

A sharing protocol for facilitating the transfer of the streaming file from the source device to the remote device via the path.

16. The data structure of claim 15:

wherein the streaming protocol comprises an HTTP or RTSP protocol,

wherein the path comprises a universal naming convention (UNC) path and

wherein the sharing protocol comprises a server message block (SMB) path.

17. The data structure of claim 15 the streaming protocol comprises a communication module on the source device connecting the remote device and the source device for parsing the path;

and the communication module authenticates the user.

18. The data structure of claim 17 the communication module on the source device defines:

having a media delivery application (MDA) on the source device to generate an authentication event including a transformed URL; and

having the communication module on the source device to parse the transformed URL.

19. The data structure of claim 17 wherein the communication module on the source device further defines:

the authentication event being passed via the MDA, said authentication event including the parsed path to the communication module on the source device;

a challenge generated by the communication module on the source device via a security support provider interface (SSPI) and returning the challenge to the MDA;

the generated challenge sending by the MDA to the remote device;

a response to the challenge sent by the remote device to the MDA;

sending by the MDA the authentication event including the response to the interface of the communication module on the source device;

an access token obtaining by the communication module on the source device;

an authentication of the user confirmed by the communication module on the source device to the MDA; and

the content of the protected file to the remote device streamed by the MDA.