HOSTED MEDIA CONTENT SERVICE SYSTEMS AND METHODS

• US 20120311688A1
• Filed: 06/06/2011
• Published: 12/06/2012
• Est. Priority Date: 06/06/2011
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Lemus, Anthony M., Krishnaswamy, Velmurugan, Okonkwo, Chukuemeka, Nambiar, Chivas, Perumandla, Aravind, Shehata, Ashraf M., Davis, Rickey A. Jr.
• Granted Patent: US 8,499,343 B2
• Time in Patent Office: Days
• US Class Current: 726/8
• CPC Class Codes: G06F 21/33 using certificates

Abstract

An exemplary system includes 1) at least one computing device within a first computing subsystem associated with a hosted media content service, the at least one computing device configured to authenticate a user to the hosted media content service and provide at least one encrypted token to a user device associated with the user, and 2) at least one other computing device within a second computing subsystem associated with the hosted media content service, the at least one other computing device configured to store hosted media content associated with the hosted media content service, receive the at least one encrypted token from the user device, validate the at least one encrypted token, and perform, in response to the validation, at least one action on media content as part of the hosted media content service. Corresponding methods and systems are also disclosed.

Claims

1. A system comprising:

at least one computing device within a first computing subsystem associated with a hosted media content service, the at least one computing device configured to

authenticate a user to the hosted media content service, and

provide at least one encrypted token to a user device associated with the user; and

at least one other computing device within a second computing subsystem associated with the hosted media content service, the at least one other computing device configured to

store hosted media content associated with the hosted media content service,

receive the at least one encrypted token from the user device,

validate the at least one encrypted token, and

perform, in response to the validation, at least one action on media content as part of the hosted media content service.

2. The system of claim 1, wherein the at least one action comprises facilitating an uploading of the media content by the user device to the second computing subsystem or a downloading of the media content by the user device from the second computing subsystem.

3. The system of claim 1, wherein the at least one action comprises:

receiving the media content from the user device; and

storing the media content to a data storage within the second computing subsystem.

4. The system of claim 1, wherein the at least one action comprises:

granting the user device access to the media content; and

transmitting the media content to the user device.

5. The system of claim 1, wherein:

the first computing subsystem is located within a data center associated with the hosted media content service; and

the second computing subsystem is located within a point of presence to an Internet backbone network.

6. The system of claim 5, wherein the data center is located at a first physical site and the point of presence is located at a second physical site separate from the first physical site.

7. The system of claim 1, wherein there is no communication between the first computing subsystem and the second computing subsystem in relation to the validation of the at least one encrypted token.

8. The system of claim 1, wherein:

the first computing subsystem is configured to provide user authentication functionality for the hosted media content service; and

the second computing subsystem is not equipped to provide user authentication functionality for the hosted media content service.

9. The system of claim 1, wherein the at least one computing device within the first computing subsystem is configured to use a single-sign-on (“

SSO”

) technology to authenticate the user for access to the hosted media content service.

10. The system of claim 1, wherein the at least one computing device within the first computing subsystem is configured to authenticate the user to the hosted media content service by

receiving user credentials for the user from the user device;

and

determining that the user credentials are valid.

11. The system of claim 1, wherein the at least one encrypted token comprises:

an encrypted time token including a user identifier and a time constraint; and

an encrypted content token including a user identifier and a content identifier.

12. The system of claim 11, wherein the at least one other computing device within the second computing subsystem is configured to validate the at least one encrypted token by

decrypting the encrypted time token and the encrypted content token;

determining that the user identifier included in the time token and the user identifier included in the content token match; and

determining that the time constraint included in the time token is satisfied.

13. The system of claim 12, wherein the at least one other computing device within the second computing subsystem is further configured to validate the at least one encrypted token by determining that the content identifier and the user identifier included in the content token match an organization of a data file structure used to store the hosted media content.

14. The system of claim 13, wherein the determining that the content identifier and the user identifier match the organization of the data file structure used to store the hosted media content comprises determining that the content identifier is associated with hosted media content that is stored within a user folder that is associated with the user identifier.

15. A method comprising:

authenticating, by a first computing subsystem, a user to a hosted media content service;

providing, by the first computing subsystem, at least one encrypted token to a user device associated with the user;

receiving, by a second computing subsystem separate from the first computing subsystem, the at least one encrypted token from the user device;

validating, by the second computing subsystem, the at least one encrypted token; and

performing, by the second computing subsystem in response to the validation, at least one action on media content as part of the hosted media content service.

16. The method of claim 15, embodied as computer-executable instructions on at least one non-transitory computer-readable medium.

17. A method comprising:

authenticating, by a first computing subsystem, a user to a hosted media content service;

providing, by the first computing subsystem in response to the authenticating, an encrypted time token to a user device associated with the user;

receiving, by the first computing subsystem, a content upload request from the user device;

generating and storing, by the first computing subsystem in response to the content upload request, a content token; and

providing, by the first computing subsystem, an encrypted copy of the content token to the user device.

18. The method of claim 17, further comprising:

receiving, by a second computing subsystem separate from the first computing subsystem, the encrypted time and content tokens from the user device;

validating, by the second computing subsystem, the encrypted time and content tokens;

allowing, by the second computing subsystem in response to the validation, an upload of media content from the user device; and

receiving and storing, by the second computing subsystem, the uploaded media content to a data storage within the second computing subsystem.

19. The method of claim 17, further comprising:

receiving, by the first computing subsystem, a content access request from the user device; and

providing, by the first computing subsystem in response to the receiving of the content access request, an encrypted copy of the content token to the user device.

20. The method of claim 19, further comprising:

receiving, by a second computing subsystem separate from the first computing subsystem, the encrypted time token and the encrypted content token provided by the first computing subsystem in response to the content access request from the user device;

validating, by the second computing subsystem, the encrypted time and content tokens;

granting, by the second computing subsystem in response to the validation, the user device access to hosted media content stored within the second computing subsystem; and

transmitting, by the second computing subsystem, the media content to the user device.

21. A method comprising:

authenticating, by a first computing subsystem, a user to a hosted media content service;

providing, by the first computing subsystem in response to the authenticating, an encrypted time token to a user device associated with the user;

receiving, by the first computing subsystem, a content access request from the user device; and

providing, by the first computing subsystem in response to the content access request, an encrypted content token to the user device.

22. The method of claim 21, further comprising:

receiving, by a second computing subsystem separate from the first computing subsystem, the encrypted time and content tokens from the user device;

validating, by the second computing subsystem, the encrypted time and content tokens;

granting, by the second computing subsystem in response to the validation, the user device access to hosted media content stored within the second computing subsystem; and

transmitting, by the second computing subsystem, the media content to the user device.

23. The method of claim 22, wherein the validating comprises:

decrypting the encrypted time and content tokens;

determining that the user identifier included in the time token and the user identifier included in the content token match; and

determining that the time constraint included in the time token is satisfied.

24. The method of claim 23, wherein the validating further comprises determining that the content identifier and the user identifier included in the content token match an organization of a data file structure used to store the hosted media content.

25. The method of claim 24, wherein the determining that the content identifier and the user identifier included in the content token match the organization of the data file structure used to store the hosted media content comprises determining that the content identifier is associated with hosted media content that is stored within a user folder that is associated with the user identifier.