System and Method for Securely Partitioning a Media Library

• US 20070282846A1
• Filed: 05/30/2006
• Published: 12/06/2007
• Est. Priority Date: 05/30/2006
• Status: Abandoned Application

• Current Assignee: Nortel Networks Limited (Nortel Networks Corporation)
• Original Assignee: Nortel Networks Limited (Nortel Networks Corporation)
• Inventors: NANNRA, Anoop, GOODWILL, Dominic John
• Application Number:
  US11/420,967
• Publication Number:
  US 20070282846A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/47202 for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/4751 for defining user accounts, e.g. accounts for children
• CPC Class Codes: H04N 21/4753 for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 7/17318 Direct or substantially direct transmission and handling of requests

Abstract

A system and method for securely partitioning a media library of a media-on-demand system is provided. Middleware instances are created for each user group defined in the media-on-demand system. Users or clients that are part of a particular user group can only access content that has been registered with the associated middleware instance. A common media server can service multiple middleware instances reducing hardware resources and administration costs. Only content that has been registered with the middleware associated with a particular user group is viewable by the user thus providing a more secure media library.

Claims

1. A method of partitioning a media-on-demand library comprising the steps of:

defining a plurality of user groups;

defining a plurality of middleware instances, each instance associated with one of the plurality of user groups;

registering streaming media content of the library with at least one of the plurality of middleware instances;

directing a request from a user to the appropriate middleware instance; and

wherein the user can only access content registered with the middleware instance of the respective user group.

2. The method of claim 1 wherein the step of registering the streaming media content further comprises the step of ingesting streaming media content into the media-on-demand library under the direction of a selected one of the plurality of middleware instances.

3. The method of claim 2 further comprising the step of creating one or more entitlement policies to the streaming media content under the control of the selected one of the plurality of middleware instances.

4. The method of claim 2 further comprising the step of creating an entitlement policy to the streaming media content for each of the plurality of middleware instances, wherein the creation of each entitlement policy is performed under the control of the respective middleware instance.

5. The method of claim 2 wherein the step of ingestion further comprises encrypting the streaming media content before storing the encrypted content in the library.

6. The method of claim 1 wherein the step of directing a request to the middleware instance further comprises authenticating the user identity and middleware instance by an authentication server.

7. The method of claim 1 wherein the step of registering further comprises receiving metadata associated with the streaming media content.

8. The method of claim 1 wherein individual administrators are assigned to each one of the plurality of middleware instances and each middleware instances is associated with streaming media from unique content sources.

9. A method of providing access to a media-on-demand library, the method comprising the steps of:

receiving a request for streaming media content stored in the media-on-demand library from a user at one of a plurality of middleware instances;

verifying at the one of the plurality of middleware instances that the user requesting the streaming media content is part of a user group associated with the middleware instance;

providing to the user an entitlement policy to the streaming media content; and

wherein the user can only access content registered with the respective middleware instance.

10. The method of claim 9 further comprising the step of streaming the requested streaming media content from a media server to the user.

11. The method of claim 9 wherein the step of verifying further comprises authenticating the credentials of the one of the plurality of middleware instances with an authentication server.

12. The method of claim 9 wherein the step of providing to the user the entitlement policy, further comprises providing a decryption key to decrypt the streaming media content.

13. The method of claim 9 wherein the entitlement policy is unique to the respective middleware instance.

14. A media-on-demand system comprising:

a library containing streaming media content; and

a plurality of middleware instances, each instance being associated with a respective user group, at least part of the streaming media content is registered with each of the plurality of middleware instances, and wherein users of the user groups can only access content registered with the respective middleware instances.

15. The system of claim 14 further comprising an entitlement manager for providing an entitlement policy to users of the user group of the respective middleware instance to access streaming media content.

16. The system of claim 15 wherein a selected one of the plurality of middleware instances controls the ingestion of streaming media content into the library and controls creation of entitlement policies.

17. The system of claim 15 wherein a selected one of the plurality of middleware instances controls the ingestion of the streaming media content in to the library and each of the plurality of middleware instances controls creation of their respective entitlement policy.

18. The system of claim 14 further comprising an encryption manager for encrypting the streaming media content and providing decryption keys to the users associated with respective plurality of middleware instances.

19. The system of claim 15 further comprising an authentication server for authenticating the credentials of middleware instances and users.

20. The system of claim 14 wherein the library further comprises common media servers accessible by all of the plurality of middleware instances.