Multiple entity control of access restrictions for media playback

• US 7,437,769 B2
• Filed: 06/24/2004
• Issued: 10/14/2008
• Est. Priority Date: 06/24/2003
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: RealNetworks, Inc.
• Inventors: Meyerson, Randy
• Primary Examiner(s): Nalven; Andrew L
• Application Number:
  US10/877,956
• Publication Number:
  US 20050086683A1
• Time in Patent Office: 1,573 Days
• Field of Search: 726/28, 709/229, 713/171, 705/51
• US Class Current: 726/28
• CPC Class Codes: H04N 21/25891 being end-user preferences retrieval of video data in a video database based on user preferences G06F16/739; arrangements for recognizing users' preferences H04H60/46; user profiles in network data switching protocols H04L67/306; processing of user preferences or user profiles in wireless networks H04W8/18
• CPC Class Codes: H04N 21/2668 Creating a channel for a dedicated end-user group, e.g. insertion of targeted commercials based on end-user profiles information retrieval from the Internet by querying with filtering and personalisation G06F16/9535; arrangements for replacing or switching information during the broadcast H04H20/10; push services over packet-switching network H04L12/1859; adaptation of message content in packet-switching networks H04L51/063
• CPC Class Codes: H04N 21/4143 embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/4622 Retrieving content or additional data from different sources, e.g. from a broadcast channel and the Internet web site content organization and management for information retrieval from the Internet G06F16/958; transmission by internet of broadcast information H04H60/82; stock exchange data over packet-switching network H04L12/1804; push services including data channel over packet-switching network H04L12/1859
• CPC Class Codes: H04N 21/4753 for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/4755 for defining user preferences, e.g. favourite actors or genre retrieval personalisation and generation of user profiles for the retrieval of video data G06F16/739; user profiles in network data switching protocols H04L67/306
• CPC Class Codes: H04N 21/4782 Web browsing , e.g. WebTV
• CPC Class Codes: H04N 21/6125 involving transmission via Internet transmission by internet of broadcast information H04H60/82
• CPC Class Codes: H04N 7/17318 Direct or substantially direct transmission and handling of requests

Abstract

Multiple entity control of access restrictions for media playback may include a first entity receiving a request for a media resource hosted by a third-party entity, the first entity authorizing a user to access the requested media resource and providing an indication to the third-party entity that the user is authorized to access the requested media resource, the third-party entity authenticating the user based upon a qualification specification, and delivering the requested media resource to the user.

Claims

1. A method comprising:

a first entity receiving a request for a media resource from a user, the media resource hosted by a third-party entity;

the first entity authorizing the user to access the requested media resource, and providing an indication to the third-party entity that the user is authorized to access the requested media resource, the indication generated in accordance with a qualification specification determined based at least in part upon the identity of the third-party entity; and

the first entity providing the third-party entity with the qualification specification, before the request is received from the user, to enable the third-party entity to authenticate the user based upon the qualification specification and to deliver the requested media resource to the user.

2. The method of claim 1, wherein the first entity providing an indication to the third-party entity comprises:

the first entity notifying the user that the third-party entity is a host of the requested media resource, the first entity providing the user with an authentication token generated in accordance with the qualification specification, and the first entity causing the user to present the authentication token to the third-party entity.

3. The method of claim 2, wherein the third-party entity independently verifies the authentication token in accordance with the qualification specification.

4. The method of claim 1, wherein the third-party entity is operationally independent from the first entity and the user.

5. The method of claim 1, wherein the qualification specification identifies an authentication scheme mutually known by the first entity and the third-party entity.

6. The method of claim 1, wherein the third-party entity streams the requested media resource to the user.

7. A method comprising:

a first entity receiving a request for a media resource from a user, the media resource hosted by a third-party entity;

the first entity determining whether the user is authorized to access the requested media resource; and

the first entity providing an identifier to the third-party entity if it is determined that the user is authorized to access the requested media resource, the identifier generated in accordance with a qualification specification based at least in part upon the identity of the third-party entity and indicating rights bestowed upon the user by the first entity, wherein the first entity provides the third-party entity with the qualification specification, before the request is received from the user, to enable the third-party entity to authenticate the user based upon the qualification specification and the identifier and to deliver the requested media resource to the user in accordance with the rights bestowed by the first entity.

8. The method of claim 7, wherein the first entity providing an identifier to the third-party entity comprises:

the first entity notifying the user that the third-party entity is a host of the requested media resource;

the first entity providing the user with an authentication token generated in accordance with the qualification specification; and

the first entity causing the user to present the authentication token to the third-party entity.

9. The method of claim 8, wherein the third-party entity independently verifies the authentication token in accordance with the qualification specification.

10. The method of claim 7, wherein the third-party entity is operationally independent from the first entity and the user.

11. The method of claim 7, wherein the third-party entity streams the requested media resource to the user.

12. A method executing on a second entity, the method comprising:

receiving a qualification specification from a first entity, before the first entity receives a request for a media resource from a user;

receiving from the user a request for the media resource, which is associated with the first entity but hosted at the second entity, the request including;

an authorization indication from the first entity, based upon the qualification specification in accordance with business rules governed by the first entity, and

a reference to the media resource, provided by the first entity;

using the qualification specification, authenticating the authorization indication; and

when the authorization indication is authenticated, delivering the media resource to the user on behalf of the first entity.

13. The method of claim 12, wherein authenticating the authorization indication comprises:

generating a sample authorization indication based upon the qualification specification; and

comparing the received authorization indication to the sample authorization indication.

14. The method of claim 12, wherein the first entity is operationally independent from the second entity and the user.

15. The method of claim 12, wherein the second entity streams the requested media resource to the user.