Authentication systems, methods, and computer program products

• US 6,173,406 B1
• Filed: 07/15/1997
• Issued: 01/09/2001
• Est. Priority Date: 07/15/1997
• Status: Expired due to Term

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Dean, Dawson F., Wang, Edward Yan-Bing, Chen, Ling Tony, Klemets, Anders Edgar, Chaddha, Navin
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): ZIEMER, RITA A
• Application Number:
  US08/895,256
• Time in Patent Office: 1,274 Days
• Field of Search: 395/187.01, 395/182.01, 395/200.47, 395/200.33, 395/200.5, 395/200.51, 395/200.53, 395/200.54, 395/200.55, 395/200.56, 395/200.61, 713/200, 713/201, 710/200, 709/203, 709/217, 709/220, 709/221, 709/223-226, 709/231
• US Class Current: 726/3
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect

Abstract

Authentication methods, systems and computer program products ensure that user media streaming requests originate with web documents having an authorized URL. The user makes a streaming request to a media server with a URL including a URL prefix, a path, and the name of a media work to be performed, which URL the media server compares with earlier made URL entries in a pre-established database. If there is a URL correspondence between a URL in the pre-established database and the URL extracted from the HTML document received by the browser from a web server, then streaming of the particular work is authorized.

Claims

1. An authentication method for streaming from a stream server to a client computer of a selected media content associated with information which has been loaded into a browser with a locator code identifying its source, comprising:

receiving an identification of the selected media content and the locator code identifying the source of the selected media content;

determining a bandwidth quota of the selected media content for the stream server and the client computer;

determining a stream quota of the selected media content for the stream server and the client computer;

authenticating that the bandwidth quota satisfies a bandwidth policy for the stream server and the client computer;

authenticating that the stream quota satisfies a stream policy for the stream server and the client computer; and

authenticating that the identification of the selected media content and the identifying locator code are an authorized combination using a predetermined database.

2. The authentication method according to claim 1 wherein said identification of the selected media content and the identifying locator code are provided to a multimedia server for authentication.

3. The authentication method according to claim 1 wherein only a selected portion of the locator code is used for authentication.

4. The authentication method according to claim 1 wherein the selected portion of the locator code used for authentication comprises a prefix portion.

5. The authentication method according to claim 1 wherein the selected portion of the locator code used for authentication comprises a suffix portion.

6. The authentication method according to claim 1 wherein said database includes at least a single authorized locator code relating to said identification of the selected media content.

7. The authentication method according to claim 1 wherein said information includes HTML code.

8. The method according to claim 1 wherein the locator code comprises a Universal Resource Locator (URL) code.

9. An authentication system for verifying that particular media content being streamed from a server to a client is associated with a locator code identified with an owner of selected media content, comprising:

a receiver configured to receive the selected media content;

a quota mechanism for determining a bandwidth quota and a stream quota of the particular media content for the server and the client; and

an authentication mechanism for authenticating that the identification of the selected media content and the identifying locator code are an authorized combination using a predetermined database and for authenticating that the bandwidth quota satisfies a bandwidth policy for the server and the client and for authenticating that the stream quota satisfies a stream policy for the server and the client.

10. An authentication method for ensuring that streaming is authorized for content selected for a media performance at a client machine which receives a page from a web server which identifies selected content for streaming from a particular media server, said authentication method comprising:

receiving a streaming request including an identification of the content selected for a media performance and an identification of the page which identifies the selected content;

comparing the identification of the content for a media performance with at least a portion of the identification of the page which identifies the selected content to determine whether streaming is to be permitted;

determining a bandwidth quota of the selected content for the particular media server and the client machine;

determining a stream quota of the selected content for the particular media server and the client machine;

authenticating that the bandwidth quota satisfies a bandwidth policy for the particular media server and the client machine;

authenticating that the stream quota satisfies a stream policy for the particular media server and the client machine; and

authorizing streaming upon determining the comparison is successful and the bandwidth policy and the stream policy are satisfied.

11. The authentication method according to claim 10 wherein the identification of the page which identifies the selected content comprises a Universal Resource Locator (URL) code.

12. The authentication method according to claim 10 wherein said media server is a video server.

13. The authentication method according to claim 10 wherein the identification of the page which identifies the selected content comprises a path word and at least a single URL portion.

14. The authentication method according to claim 13 wherein the page comprises a password protected page.

15. A computer-readable medium having computer-instructions for causing a computer to perform a method for authenticating streaming from a stream server to a client computer of a selected media content, the method comprising:

receiving an identification of the selected media content and a locator code identifying a source of the selected media content;

determining a bandwidth quota of the selected media content for the stream server and the client computer;

determining a stream quota of the selected media content for the stream server and the client computer;

authenticating that the bandwidth quota satisfies a bandwidth policy for the stream server and the client computer;

authenticating that the stream quota satisfies a stream policy for the stream server and the client computer; and

authenticating that the identification of the selected media content and the identifying locator code are an authorized combination using a predetermined database.

16. A computer-readable medium having computer-instructions for causing a computer to perform a method for ensuring that streaming is authorized for content selected for a media performance at a client machine which receives a page from a web server which identifies selected content for streaming from a particular media server, the method comprising:

receiving a streaming request including an identification of the selected content and an identification of a page which identifies the selected content;

comparing the identification of the selected content with at least a portion of the identification of the page which identifies the selected content to determine whether streaming is to be permitted;

determining a bandwidth quota of the selected content for the web server and the client machine;

determining a stream quota of the selected content for the web server and the client machine;

authenticating that the bandwidth quota satisfies a bandwidth policy for the web server and the client machine;

authenticating that the stream quota satisfies a stream policy for the web server and the client machine; and

authorizing streaming upon determining the comparison is successful and the bandwidth policy and the stream policy are satisfied.