Remotely accessing protected files via streaming

• US 7,681,238 B2
• Filed: 08/11/2005
• Issued: 03/16/2010
• Est. Priority Date: 08/11/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Schiefelbein, William F., Dooley, James H. IV, Flaks, Jason S., Plastina, Daniel, Oliveira, Eduardo P., Bhatt, Sanjay, Walter, James T.
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): TABOR, AMARE F
• Application Number:
  US11/201,531
• Publication Number:
  US 20070039055A1
• Time in Patent Office: 1,678 Days
• Field of Search: 726/26, 380/212
• US Class Current: 726/26
• CPC Class Codes: G06F 16/40 of multimedia data, e.g. slideshows comprising image and additional audio data retrieval of still image data G06F16/50; retrieval of audio data G06F16/60; retrieval of video data G06F16/70
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4143 embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/4788 communicating with other users, e.g. chatting arrangements for providing for computer conferences, e.g. chat rooms, to substation in data switching networks H04L12/1813; distributed application using peer-to-peer [P2P] networks H04L67/104
• CPC Class Codes: H04N 21/6408 Unicasting
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/173 with two-way working, e.g. subscriber sending a programme selection signal

Abstract

A source device permits a user of a remote device to access a protected file on the source device when the user of the remote device has a right to access the protected file. The user locates the protected file on the source device using the remote device and accesses the protected file using a media player on the remote device. The media player constructs a path by which the source device streams the protected file. The remote device responds to an authentication request from the source device that the user of the remote device has a right to access the protected file. The user is authenticated to confirm that the user of the remote device has a right to access the protected file. The protected file is streamed to the remote device via a path constructed by the remote device.

Claims

1. A method in which a user invokes, from a remote device, a protected file on a source device, wherein the user has a right to access the protected file, and wherein the protected file requires a locally stored license for invocation, the method comprising:

locating the protected file on the source device, wherein the protected file is deemed locatable via a server message block (SMB) path of the protected file broadcasted by the source device; and

accessing the located, protected file via a media player on the remote device, said accessing comprising;

initiating the media player on the remote device upon selection of the protected file by the user;

constructing, by the media player, a streaming uniform resource location (URL) based on the SMB path for streaming the protected file to the remote device without acquiring an additional license for the remote device, said constructing comprising constructing the streaming URL from a device document provided by the source device;

requesting the protected file from the source device via the streaming URL;

responding by the remote device to an authentication request from the source device;

receiving by the remote device, in response to said responding, a physical path of the protected file from the source device, said physical path translated from the streaming URL by the source device; and

streaming by the media player on the remote device the protected file via the physical path.

2. The method of claim 1 wherein the constructed streaming URL is a SMB-Home Media Ecosystem (HME) URL, and wherein locating further comprises one or more of the following:

browsing the source device by the remote device to locate the protected file on the source device via the SMB oath of the protected file, or searching the source device by the remote device to locate the protected file on the source device via the SMB path of the protected file.

3. The method of claim 1 wherein responding to the authentication request comprises:

using an interface of a communication module on the source device to parse the streaming URL; and

using the interface of the communication module to authenticate the user.

4. The method of claim 3 wherein using the interface of the communication module on the source device to parse the streaming URL comprises:

using a media delivery application (MDA) on the source device to generate an authentication event including a transformed URL; and

using the interface of the communication module on the source device to parse the transformed URL.

5. The method of claim 4 wherein using the interface of the communication module to authenticate the user comprises:

passing via the MDA the authentication event including the parsed streaming URL to the interface of the communication module on the source device;

generating by the communication module on the source device a challenge via a security support provider interface (SSPI) and returning the challenge to the MDA;

sending by the MDA the generated challenge to the media player;

sending by the media player to the MDA a response to the challenge;

sending by the MDA the authentication event including the response to the interface of a module on the source device;

obtaining by the MDA module on the source device an access token;

confirming authentication of the user by the communication module on the source device to the MDA; and

streaming by the MDA the content of the protected file to the media player.

6. The method of claim 1 further comprising editing data associated with the file via the SMB path.

7. The method of claim 1 wherein responding to the authentication request comprises:

Using a media delivery application (MDA) on the source device to generate an authentication event including a transformed URL;

Using the interface of the communication module on the source device to parse the transformed URL;

Passing via the MDA the authentication event including the parsed URL to the interface of module communication on the source device;

Generating by the communication module on the source device a challenge via a security support provider interface (SSPI) and returning the challenge to the MDA;

Sending by the MDA the generated challenge to the media player;

Sending by the media player to the MDA a response to the challenge;

Sending by the MDA the authentication event including the response to the interface of the communication module on the source device;

Obtaining by the communication module on the source device an access token;

Sending by the MDA the authentication event including the access token to the connect protocol;

Confirming authentication of the user by the communication module on the source device to the MDA; and

Streaming by the MDA the content of the protected file to the media player.

8. The method of claim 1 wherein responding to the authentication request comprises:

Generating an authentication event including a transformed URL;

Parsing the transformed URL;

Generating a challenge to the media player;

Sending by the media player a response to the challenge;

Obtaining an access token;

Using the access token to confirm authentication of the user; and

Streaming the content of the protected file to the media player.

9. A system for permitting a user of a remote device to stream a protected file stored on a source device, said protected file requiring a locally stored license for invocation, said system comprising:

an interface for receiving a request from the user of the remote device for accessing the protected file on the source device, said protected file broadcasted by the source device via a server message block (SMB) path of the protected file, said request comprising a streaming uniform resource locator (URL) constructed based on the SMB oath and from a device document provided by the source device;

an authentication component for determining the permission based on the request by authenticating that the user of the remote device has a right to access a protected file based on the locally stored license, said authenticating resulting in translation of the streaming URL to a physical path of the protected file; and

a streaming component for streaming the protected file in response to the request to the remote device via a path constructed by the remote device and for enabling the remote device to stream the protected file without transmitting an additional copy of the license from the source device to the remote device.

10. The system of claim 9 wherein the interface is configured to perform one or more of the following:

browses the source device to locate the protected file on the source device via the SMB oath, or searching the source device by the remote device to locate the protected file on the source device via the SMB path.

11. The system of claim 9 wherein the streaming component comprises using an interface of a communication module on the source device to parse the constructed path included in the request and using the connection protocol to authenticate the user.

12. The system of claim 11 wherein the streaming component uses the connection protocol on the source device to parse the constructed path by:

using a media delivery application (MDA) on the source device to generate an authentication event including a transformed URL; and

using the interface of the communication module on the source device to parse the transformed URL.

13. The system of claim 12 wherein the streaming component uses the connect protocol to authenticate the user by:

passing via the MDA the authentication event including the parsed path to the interface of the communication module on the source device;

generating by the communication module on the source device a challenge via a security support provider interface (SSPI) and returning the challenge to the MDA;

sending by the MDA the generated challenge to the remote device;

sending by the remote device to the MDA a response to the challenge;

Sending by the MDA the authentication event including the response to the interface of the communication module on the source device

obtaining by the communication module on the source device an access token;

confirming authentication of the user by the communication module on the source device to the MDA; and

streaming by the MDA the content of the protected file to the remote device.

14. The system of claim 9 wherein constructed path being associated with the file is an SMB path.

15. A data structure defining a streaming uniform resource locator (URL) constructed by a remote device for use by the remote device to receive a protected file streamed over the URL by a source device, wherein the remote device constructs the streaming URL from a device document provided by the source device. wherein the user of the remote device has a right to access the protected file which requires a locally stored license for invocation, said data structure comprising:

A streaming protocol by which the file is streamed;

A path linking the remote device and the source device over which the streamed file is provided enabling the remote device to stream the protected file without transmitting an additional copy of the license from the source device to the remote device; and

A sharing protocol for facilitating the transfer of the streaming file from the source device to the remote device via the path.

16. The data structure of claim 15:

wherein the streaming protocol comprises an HTTP or RTSP protocol,

wherein the path comprises a universal naming convention (UNC) path,

wherein the sharing protocol comprises a server message block (SMB) path broadcasting the presence of the protected file, and

wherein the streaming URL is a SMB-Home Media Ecosystem (HME) URL.

17. The data structure of claim 15 the streaming protocol comprises a communication module on the source device connecting the remote device and the source device for parsing the path;

and the communication module authenticates the user.

18. The data structure of claim 17 the communication module on the source device defines:

having a media delivery application (MDA) on the source device to generate an authentication event including a transformed URL; and

having the communication module on the source device to parse the transformed URL.

19. The data structure of claim 18 wherein the communication module on the source device further defines:

the authentication event being passed via the MDA, said authentication event including the parsed path to the communication module on the source device;

a challenge generated by the communication module on the source device via a security support provider interface (SSPI) and returning the challenge to the MDA;

the generated challenge sending by the MDA to the remote device;

a response to the challenge sent by the remote device to the MDA;

sending by the MDA the authentication event including the response to the interface of the communication module on the source device;

an access token obtaining by the communication module on the source device;

an authentication of the user confirmed by the communication module on the source device to the MDA; and

the content of the protected file to the remote device streamed by the MDA.