Controlling access to copies of media content by a client device

• US 9,203,816 B2
• Filed: 09/04/2009
• Issued: 12/01/2015
• Est. Priority Date: 09/04/2009
• Status: Active Grant

• Current Assignee: Dish Technologies LLC (Dish Network Corporation)
• Original Assignee: Echostar Technologies LLC (Echostar Corporation)
• Inventors: Brueck, David F., Bye, Justyn T.
• Primary Examiner(s): Kim, Jung
• Assistant Examiner(s): NGUYEN, NGOC THACH D
• Application Number:
  US12/554,730
• Publication Number:
  US 20110058675A1
• Time in Patent Office: 2,279 Days
• Field of Search: 380/277, 709/229, 713/193, 725/31, 726/27
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 65/1045 Proxies, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 65/762 at the source reformatting of additional data in video distribution servers H04N21/2355
• CPC Class Codes: H04L 65/80 Responding to QoS
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed

Abstract

A key server for controlling access of a client device to a subset of different quality copies of media content to be delivered over a network to the client device. In one embodiment, a key server receives a request for playback permission of media content by a client device, and applies a set of one or more business rules to determine which copies of the media content, if any, can be played by the client device, and allows access to a subset of the copies that can be played back by the client device and restricts access to the copies that are not part of the subset.

Claims

1. A method executable by a computerized key server communicating on a network, the method comprising:

storing, at the key server, a set of encryption keys each corresponding to one of a plurality of different copies of a media content, wherein each of the different copies of the media content is stored on a content server separate from the key server, wherein each of the plurality of different copies is made up of a set of individually-requestable data segments each representing a portion of the media content, and wherein each of the sets of individually-requestable data segments represents a different version of the same media content encoded according to one of a plurality of different quality levels in a separate file that is individually identifiable and requestable from the separate content server by a client device;

subsequently receiving a request for playback permission from the client device by the key server, wherein the request for playback permission comprises information that identifies the client device and an identifier of the media content;

using the information of the request for playback permission received at the key server, applying a set of one or more business rules by the key server to determine which of the sets of individually-requestable data segments representing different versions of the same media content, if any, are approved for playback on the client device;

sending access information from the key server to the client device, the access information comprising a key file containing encryption keys for multiple ones of the different copies of the media content that are approved for playback on the client device to thereby allow the client device to adaptively request data segments from any of the different copies of the media content that are approved for playback by the client device.

2. The method of claim 1, wherein the set of encryption keys is received from a content management system that is associated with a publisher of the media content.

3. The method of claim 1, wherein the access information sent from the key server to the client device comprises the different encryption keys for the different copies of the media content that are approved for playback on the client device but does not comprise the encryption keys for the different copies of the media content that are not approved for playback on the client device.

4. The method of claim 1, wherein the access information controls the type of media content that can be played back on the client device.

5. The method of claim 1, wherein the access information comprises:

instructions that prevent playback of the different copies that are not approved for playback on the client device.

6. The method of claim 5, wherein the instructions comprise instructions that specify a maximum duration of permitted playback of one or more of the plurality of different copies.

7. The method of claim 1, wherein the at least one of the copies of the media content that is not approved for playback by the client device is encoded according to a higher quality level than the at least one of the copies of the media content that is approved for playback by the client device.

8. The method of claim 7 wherein the set of cryptographic keys is generated by an encoder that encodes each of the different copies of the media programs according to the plurality of different quality levels, and wherein the different copies of the individually-requestable data segments of the different copies are encrypted prior to storage on a content delivery network (CDN) that is separate from the key server.

9. The method of claim 1, wherein the method further comprises extracting a network address of the client device from the request, and wherein the applying of the set of business rules comprises determining if the network address is located in an approved geographic area to view the media content and, if the network address is not located in an approved geographic area, then not identifying the individually-requestable data segments associated with the media content to the client device.

10. The method of claim 1, wherein the plurality of different copies of the media content are encoded at the plurality of different quality levels according to a plurality of quality profiles, and wherein the applying of the set of business rules comprises determining which of the plurality of quality profiles meets a maximum or minimum criterion for a parameter of the quality profile.

11. The method of claim 10, wherein the maximum or minimum criterion is at least one of the following:

a maximum or minimum bit rate;

a maximum or minimum frame rate;

a maximum or minimum frame size;

a maximum or minimum image size; and

a maximum or minimum staging size.

12. The method of claim 1, wherein the applying of the set of business rules comprises determining a subscription level for the client device using an identifier for the client device, wherein the subscription level specifies which of the plurality of different copies of the media content, if any, can be played back on the client device.

13. The method of claim 12, wherein said determining comprises:

requesting the subscription level from a remote server; and

receiving the subscription level from the remote server at the key server.

14. The method of claim 1, wherein said receiving comprises receiving a token key from the client device, and wherein the applying of the business rules comprises validating the token, wherein the token specifies which of the plurality of different copies, if any, are approved for playback on the client device.

15. A computer-implemented key server, comprising:

a computing device configured to communicate with a network;

a data storage configured to store a set of encryption keys associated with a media content, wherein each of the encryption keys in the set corresponds to a different copy of a media content encoded at a different quality level, and wherein each of the different copies of the media content is stored on a content server separate from the key server; and

a rules engine executable on the computing device that is configured to receive a request over the network for playback permission of the media content by a client device that comprises information that identifies the client device and the media content to be viewed using the client device, and wherein the rules engine is configured to;

apply a set of one or more business rules using information of the request to determine which of the sets of individually-requestable data segments representing different versions of the same media content, if any, are approved for playback by the client device; and

send access information comprising a key file containing encryption keys for multiple ones of the different copies of the media content that are approved for playback on the client device to thereby allow the client device to adaptively request data segments from any of the different copies of the media content that are approved for playback by the client device using the access information.

16. The server of claim 15, wherein the rules engine allows access by sending the access information to the client device to allow playback of the copies that are approved for playback on the client device and to prevent playback of the copies that are not approved for playback on the client device.

17. The server of claim 15, wherein the access information controls the type of media content that can be played back on the client device.

18. The server of claim 15, wherein the access information comprises:

instructions that prevent playback of the copies that are not approved for playback on the client device.

19. The server of claim 18, wherein the instructions comprise instructions that specify a maximum duration of permitted playback of one or more of the plurality of copies.

20. The server of claim 15, wherein the request for playback permission comprises a key request for a key file identified by an identifier of the media content.

21. The server of claim 15, wherein the copies that are approved for playback on the client device are encoded at a lower quality level than the copies of the same media content that are not approved for playback on the client device.

22. A method executable by a media player device to playback a media program received from a content server via a network, the method comprising:

initiating a session with the content server to thereby obtain information about the media program, wherein the information describes multiple different copies of the media program that are available from the content server, each of the multiple different copies being made up of a plurality of individually-requestable media segments and being encoded at a different quality level;

forwarding at least some of the information about the media program obtained from the content server to a key server via the network, wherein the key server is separate from the content server, to thereby allow the content server to authorize the media player device to playback the multiple different copies of the media program;

receiving a response from the key server that comprises a key file containing encryption keys associated with the multiple different copies of the media program that are approved for playback on the client device to thereby allow the media player device to adaptively request data segments from any of the multiple different copies of the media content that are approved for playback on the media player device;

requesting individual media segments of the multiple different copies of the media program that are authorized for playback from the content server;

decrypting the requested individual media segments using the encryption key received from the key server that is associated with the copy of the media program from which the individual media segment was requested; and

rendering the decrypted media segment for playback by the media player device.

23. The method of claim 22 wherein the key server authorizes the playback of the multiple different copies of the media program based upon business rules.

24. The method of claim 22 wherein the content server is implemented within a content delivery network (CDN) so that the requesting of individual media segments is performed by issuing HTTP GET requests from the media player device to the content delivery network.