CONDUCTING SESSIONS WITH CAPTURED IMAGE DATA OF PHYSICAL ACTIVITY AND UPLOADING USING TOKEN-VERIFIABLE PROXY UPLOADER

• US 20150067811A1
• Filed: 09/05/2014
• Published: 03/05/2015
• Est. Priority Date: 09/05/2013
• Status: Active Grant

• Current Assignee: Nike, Inc.
• Original Assignee: Nike, Inc.
• Inventors: Agnew, John, Ota, Jeffrey, Hall, John J., Whitely, Mark, Hafiz, Nauman
• Granted Patent: US 9,553,873 B2
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding

Abstract

A token-verifiable proxy uploader is disclosed. A token request may be transmitted from an end-user communication device for requesting an upload token from a hosted services server that is configured to authorize transmission of a first media file to a hosted proxy server. The upload token may be transmitted to the end-user communication device. Validation of the user of the end-user communication device may be conducted without the end-user device providing any credentials to the media sharing site and in which the end-user device is does not transmit any credentials specific to the media sharing site as part of the validation. The token validation call may be in response to the hosted proxy server receiving the upload token and either: (1) the first media file from the end-user communication device; or (2) a request from the end-user communication device to upload the first media file to the hosted proxy server.

Claims

1. A computer-implemented method comprising:

receiving at a hosted services server, a token request transmitted from an end-user communication device, requesting an upload token from the hosted services server configured to authorize transmission of a first media file to a hosted proxy server;

upon validating a user of the end-user communication device using end-user credentials to the hosted services server, transmitting the upload token to the end-user communication device;

receiving at the hosted services server, a token validation call from the hosted proxy server; and

transmitting a validation message from the hosted services server to the hosted proxy server configured to authorize transmission of the first media file from the hosted proxy server to a media sharing site using credentials of the hosted services server.

2. The method of claim 1, wherein the validation of the user of the end-user communication device is conducted without the end-user device providing any credentials to the media sharing site and in which the end-user device is does not transmit any credentials specific to the media sharing site as part of the validation.

3. The method of claim 1, wherein the token validation call from the hosted proxy server is in response to the hosted proxy server receiving the upload token and either:

(1) the first media file from the end-user communication device;

or (2) a request from the end-user communication device to upload the first media file to the hosted proxy server.

4. The method of claim 1, wherein the media file comprises a plurality of sequential images, and the method further comprising:

conducting at one or more of the hosted proxy server and the hosted services server, image analytics on at least a portion of the plurality of sequential images to determine a tag for the media file.

5. The method of claim 1, further comprising:

receiving, at the hosted services server, a unique identification representing a location of the media file on the media sharing site.

6. The method of claim 1, further comprising:

receiving, at the end-user communication device, a unique identification representing a location of the media file on the media sharing site.

7. The method of claim 1, wherein the end-user communication device is a first end-user communication device, and the method further comprising:

storing the file or a portion thereof on the hosted proxy server, wherein the file stored on the hosted proxy server and the media sharing site is retrievable the first end-user communication device, and the file stored on the hosted proxy server is not retrievable by a second end-user communication device.

8. A computer-implemented method comprising:

receiving at a proxy server, an upload token and a file, wherein the token is configured to authenticate the file for storage at a remote file sharing location, wherein the file and the token were each transmitted from a first end-user communication device of a first plurality of end-user communication devices, wherein the token was generated in response to verifying credentials from the end-user communication device with respect to a first service without the first end-user device or a user of the first device providing any credentials to the file sharing location;

validating the token before attempting to transmit the file for storage at the remote file sharing location;

after validating the token, transmitting the file to the file share location using credentials to the file share location that are not available to the first end-user communication device and wherein the file sharing location does not receive any credentials specific to the first user or the first end-user communication device with respect to the first service; and

independently storing the file or a portion thereof on the proxy server, wherein the file stored on the remote file share location is retrievable by any one of a second plurality of end-user communication devices that is distinct and non-overlapping with respect to the first plurality of end-user communication devices, and the file stored on the proxy server is not retrievable by any of the second plurality of end-user communication devices.

9. The method of claim 8, wherein each of the first plurality of end-user communication devices comprises a services module and none of the second plurality of end-user communication devices comprises the services module.

10. The method of claim 8, wherein each of the first plurality of end-user communication devices comprise a first collection of computer-executable instructions on a non-transitory computer-readable medium that is not located on any of second plurality of end-user communication devices, wherein execution of the first collection of computer-executable instructions permits retrieval of the file from the proxy server.

11. The method of claim 8, further comprising:

receiving at a hosted services server, a token request transmitted from the first end-user communication device of the first plurality of end-user communication devices, requesting the upload token from a hosted services server configured to authorize transmission of the file to the proxy server; and

upon validating a user of the first end-user communication device of the first plurality of end-user communication devices using end-user credentials to the hosted services server, transmitting the upload token to the first end-user communication device of the first plurality of end-user communication devices.

12. The method of claim 11, wherein the hosted services server is remote with respect to the proxy server and the file share location.

13. A computer-implemented method comprising:

receiving at a hosted proxy server a token and a file for storage at a file sharing location, that were transmitted from an end-user communication device of a first user, wherein the token was generated in response to verifying credentials from the end-user communication device to a hosted services server and without the end-user device or the first user providing any credentials specific to the file sharing location;

requesting verification from the hosted services server that the token is valid before attempting to transmit the file for storage at the file sharing location;

after verifying the token, transmitting the file to the file share location using credentials to the file share location that are not available to the first user of the end-user communication device and wherein the file sharing location does not receive any credentials specific to the first user or the end-user communication device with respect to the hosted services server; and

transmitting a unique identifier configured to permit access by at least the first user to at least one of the hosted services server or the end-user communication device.

14. The method of claim 13, wherein the unique identifier is transmitted to the end-user communication device but not the hosted services device.

15. The method of claim 13, wherein the token is a first token selected from a plurality of tokens and is configured to provide a first privilege for the file with respect to the file sharing location, and the hosted services server is configured to selectively provide a second token configured to provide a second privilege for the file with respect to the file sharing location.

16. The method of claim 13, wherein the generation of the token is based, at least in part, verifying credentials specific to the first user.

17. The method of claim 13, wherein the verification of the credentials specific to the first user with respect to a specific service offered by a first entity that is not the file sharing location and is transmitted from the end-user communication device to a hosted services server and without the end-user device or the first user providing any credentials to the file sharing location.