Cloud queue access control

• US 9,537,852 B2
• Filed: 02/06/2015
• Issued: 01/03/2017
• Est. Priority Date: 06/04/2014
• Status: Active Grant

• Current Assignee: Sonos, Inc.
• Original Assignee: Sonos, Inc.
• Inventors: Beckhardt, Steven, Schulert, Andrew J., Ramsperger, Gregory
• Primary Examiner(s): Flanders, Andrew C
• Application Number:
  US14/616,310
• Publication Number:
  US 20150358304A1
• Time in Patent Office: 697 Days
• US Class Current: 1/1
• CPC Class Codes: G05B 15/02 electric
• CPC Class Codes: G06F 16/44 Browsing; Visualisation therefor
• CPC Class Codes: G06F 16/638 Presentation of query results
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 3/16 Sound input; Sound output speech processing G10L
• CPC Class Codes: G06F 3/165 Management of the audio stream, e.g. setting of volume, audio stream path
• CPC Class Codes: H04H 60/80 characterised by transmission among terminal devices
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/60 Network streaming of media packets
• CPC Class Codes: H04L 65/61 for supporting one-way streaming services, e.g. Internet radio
• CPC Class Codes: H04L 65/612 for unicast
• CPC Class Codes: H04L 65/65 Network streaming protocols, e.g. real-time transport protocol [RTP] or real-time control protocol [RTCP]
• CPC Class Codes: H04L 65/762 at the source reformatting of additional data in video distribution servers H04N21/2355
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/62 : Establishing a time schedule for servicing the requests
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25816 : involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/26258 : for generating a list of items to be played back in a given order, e.g. playlist, or scheduling item distribution according to such list retrieval of multimedia data based on playlists G06F16/40
• CPC Class Codes: H04N 21/4325 : by playing back content from the storage medium reproduction of recorded television signals H04N5/76; reproduction of recorded television signals H04N9/79
• CPC Class Codes: H04N 21/43615 : Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4825 : using a list of items to be played back in a given order, e.g. playlists
• CPC Class Codes: H04N 21/6377 : directed to server one-way streaming services wherein the source is controlled by the destination H04L65/613
• CPC Class Codes: H04N 21/654 : Transmission by server directed to the client
• CPC Class Codes: H04N 21/658 : Transmission by the client directed to the server
• CPC Class Codes: H04N 21/8113 : comprising music, e.g. song in MP3 format
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 21/8455 : involving pointers to the content, e.g. pointers to the I-frames of the video stream
• CPC Class Codes: H04R 2227/005 : Audio distribution systems for home, i.e. multi-room use
• CPC Class Codes: H04R 27/00 : Public address systems circuits for preventing acoustic reaction H04R3/02; circuits for distributing signals to loudspeakers H04R3/12; monitoring or testing arrangements for public address systems H04R29/007; amplifiers H03F

Abstract

An example implementation may involve a media playback system obtaining an authorization token corresponding to a particular queue of media items at a remote server. The media playback system may send to the remote server, (i) the obtained authorization token, and (ii) a request for access to one or more media items of the particular queue. The media playback system may receive, from the remote server, an indication that the media playback system may access the one or more media items.

Claims

1. A method comprising:

obtaining, via a media playback system over a network interface, an authorization token corresponding to a particular cloud queue of media items at a remote server, wherein the particular cloud queue is accessible to the media playback system via a wide area network;

sending, via the media playback system to the remote server over the network interface, (i) the obtained authorization token, and (ii) a request for access to one or more first media items of the particular cloud queue based on the obtained authorization token, wherein the one or more first media items comprise a given first media item corresponding to a first play position within the particular cloud queue;

receiving, via the media playback system from the remote server over the network interface, an indication that the media playback system is authorized to access the one or more first media items of the particular cloud queue;

sending, via the media playback system to the remote server over the network interface, (i) the obtained authorization token, and (ii) a request for access to one or more second media item of the particular cloud queue based on the obtained authorization token, wherein the one or more second media items comprise a given second media item corresponding to a second play position within the particular cloud queue; and

receiving, via the media playback system from the remote server over the network interface, an indication that the media playback system is authorized to access the one or more second media items of the particular cloud queue.

2. The method of claim 1, wherein the authorization token is associated with a set of access rights, wherein the set of access rights includes display rights that permit displaying the particular cloud queue, wherein receiving the indication that the media playback system is authorized to access the one or more first media items comprises receiving data indicating the one or more first media items of the particular cloud queue and wherein the method further comprises:

causing, via a control device of the media playback system, a graphical interface to display respective indications of the one or more first media items.

3. The method of claim 1, wherein the authorization token is associated with a set of access rights, wherein the set of access rights include queue rights that permit adding the media items of the particular cloud queue to one or more local queues, wherein receiving the indication that the media playback system is authorized to access the one or more first media items comprises receiving data indicating (i) the one or more first media items of the particular cloud queue and (ii) respective sources of the one or more first media items, and wherein the method further comprises:

adding the one or more first media items of the particular cloud queue to a local queue of the media playback system.

4. The method of claim 1, wherein the authorization token is associated with a set of access rights, wherein the set of access rights associated with the obtained authorization token include playback rights that permit playback of the media items of the particular cloud queue, wherein receiving the indication that the media playback system may access the one or more media items comprises receiving data indicating (i) the one or more first media items of the particular cloud queue and (ii) respective sources of the one or more first media items, and wherein the method further comprises:

obtaining the given first media item from the source of the given first media item.

5. The method of claim 1, further comprising receiving an indication that the obtained authorization token has expired such that access to the particular cloud queue of media items at the remote server is withdrawn from the media playback system, and

responsively, configuring the media playback system to playback from another queue.

6. The method of claim 1, wherein obtaining the authorization token corresponding to the particular cloud queue of media items at the remote server comprises:

sending, to the remote server over the network interface, a request for an authorization token that authenticates one or more particular playback devices of the media playback system to play back media items of the particular cloud queue in synchrony; and

receiving the requested authorization token, wherein the received authorization token authenticates the one or more particular playback devices of the media playback system to play back media items of the particular cloud queue in synchrony.

7. The method of claim 1, wherein the media playback system is associated with a particular account, and wherein obtaining the authorization token corresponding to the particular cloud queue of media items at the remote server comprises:

sending, to the remote server over the network interface, a request for an authorization token that authenticates the particular account to access the particular cloud queue at the remote server; and

receiving the requested authorization token over the network interface, wherein the received authorization token authenticates a control device that is registered with the particular account to access the particular cloud queue at the remote server, wherein the control device is configured to control playback by one or more playback devices of the media playback system.

8. The method of claim 1, wherein obtaining the authorization token corresponding to the particular cloud queue of media items at the remote server comprises:

sending (i) an indication of a given session of the media playback system to the remote server, wherein the given session has a duration; and

(ii) a request for an authentication token that authenticates the media playback system to access the particular cloud queue at the remote server for the duration of the given session; and

receiving the requested authorization token, wherein the received authorization token authenticates the media playback system to access the particular cloud queue at the remote server for the duration of the given session.

9. The method of claim 8, further comprising:

sending, to the remote server, a request to renew the received authorization token based on playback, by the media playback system, of the media items queued in the particular cloud queue during the given session.

10. The method of claim 9, further comprising:

receiving a renewed authorization token, wherein the received authorization token authenticates the media playback system to access the particular cloud queue at the remote server for a second duration of the given session.

11. The method of claim 1, wherein obtaining the authorization token corresponding to the particular cloud queue of media items at the remote server comprises:

receiving data representing a hypertext transfer protocol header indicating an authorization code that authenticates access rights to the particular cloud queue of media items at the remote server.

12. The method of claim 1, wherein obtaining the authorization token corresponding to the particular cloud queue of media items at the remote server comprises:

sending, via a control device of the media playback system, a request for an authorization token that authenticates access to the particular cloud queue at the remote server;

receiving, via the control device, the requested authorization token, wherein the received authorization token authenticates the control device to access the particular cloud queue at the remote server; and

sending, via the control device, the received authorization token to one or more playback devices of the media playback system, wherein the received authorization token authenticates the one or more playback devices to access the particular cloud queue at the remote server.

13. The method of claim 1, wherein obtaining the authorization token corresponding to the particular cloud queue of media items at the remote server comprises:

sending, via a playback device of the media playback system, a request for an authorization token that authenticates access to the particular cloud queue at the remote server;

receiving, via the playback device, the requested authorization token, wherein the received authorization token authenticates the playback device to access the particular cloud queue at the remote server; and

sending, via the playback device, the received authorization token to one or more additional playback devices of the media playback system, wherein the received authorization token authenticates the one or more additional playback device to access the particular cloud queue at the remote server.

14. A computing device comprising:

a network interface;

at least one processor;

a data storage; and

a program logic stored in the data storage and executable by the at least one processor to;

obtain, over the network interface, an authorization token corresponding to a particular cloud queue of media items at a remote server, wherein the particular cloud queue is accessible to the computing device via a wide area network;

send, to the remote server over the network interface, (i) the obtained authorization token, and (ii) a request for access to one or more first media items of the particular cloud queue based on the obtained authorization token, wherein the one or more first media items comprise a first media item corresponding to a first play position of the particular cloud queue;

receive, over the network interface, an indication that a media playback system is authorized to access the one or more media items of the particular cloud queue, wherein the media playback system comprises the computing device;

send, via the media playback system to the remote server over the network interface, (i) the obtained authorization token, and (ii) a request for access to one or more second media items of the particular cloud queue based on the obtained authorization token, wherein the one or more second media items comprise a given second media item corresponding to a second play position within the particular cloud queue; and

receive, via the media playback system from the remote server over the network interface, an indication that the media playback system is authorized to access the second media item of the particular cloud queue.

15. A method comprising:

receiving, via a computing system over a network interface, (i) an authorization token associated with a particular media playback system, and (ii) a request by the particular media playback system to play back a cloud queue of media items, wherein the cloud queue is accessible to the particular media playback system via a wide area network;

determining, via the computing system, a type of access to the cloud queue that the authorization token authenticates to the particular media playback system, wherein the type of access includes play back of the cloud queue; and

providing, via the computing system to the particular media playback system, the type of access to the cloud queue of media items that the authorization token authenticates to the particular media playback system, where providing the type of access comprises facilitating playback of multiple media items from the cloud queue on the particular media playback system.

16. The method of claim 15, further comprising:

receiving, over the network interface, (i) a request for an authentication token that authenticates the particular media playback system to access the cloud queue of media items, and (ii) one or more credentials associated with the particular media playback system; and

determining that the one or more credentials authorize the particular media playback system to access the cloud queue of media items; and

based on determining that the one or more credentials authorize the particular media playback system to access the cloud queue of media items, sending, to the particular media playback system over the network interface, the requested authentication token that authenticates the particular media playback system to access the cloud queue of media items.

17. The method of claim 15, further comprising:

receiving (i) an indication of a given session of the particular media playback system, wherein the given session has a duration; and

(ii) a request for an authentication token that authenticates the particular media playback system to access the cloud queue for the duration of the given session; and

wherein determining the type of access to the cloud queue that the authorization token authenticates to the particular media playback system comprises determining that the authorization token has expired on the basis that the duration of the given session has elapsed, wherein expiration of the authorization token withdraws access to the cloud queue of media items.

18. The method of claim 17, further comprising:

receiving, over the network interface, (i) a request to renew the received authorization token, and (ii) data indicating playback history of the media items queued in cloud queue during the given session;

based on the received data indicating playback history of the media items queued in the cloud queue, determining that playback of the media items of the cloud queue during the given session exceeds a threshold for renewal of the authorization token; and

based on determining that playback of the media items of the cloud queue during the given session exceeds the threshold for renewal of the authorization token, sending, over the network interface, a renewed authorization token, wherein the renewed authorization token authenticates the particular media playback system to access the cloud queue for a second duration of the given session.

19. The method of claim 15:

wherein determining the type of access to the cloud queue that the authorization token authenticates to the particular media playback system comprises determining that the authorization token have expired; and

wherein providing, to the particular media playback system, the access to the media items that the authorization token authenticates to the particular media playback system comprises sending, to the particular media playback system over the network interface, an indication that the authorization token has expired such that access to the cloud queue of media items is withdrawn.

20. The method of claim 15:

wherein determining the type of access to the cloud queue that the authorization token authenticates to the particular media playback system comprises determining that the authorization token authorizes a first type of access to the cloud queue of media items, wherein the first type of access authorizes one or more playback devices of the particular media playback system to playback the media items of the cloud queue; and

wherein providing, to the particular media playback system, the access to the media items that the authorization token authenticates to the particular media playback system comprises sending, over the network interface, respective indications of one or more media items queued in the cloud queue to one or more playback devices of the particular media playback system.

21. The method of claim 15:

wherein determining the type of access to the cloud queue that are granted by the authorization token to the particular media playback system comprises determining that the authorization token authorizes a second type of access to the cloud queue of media items, wherein the second type of access authorizes the particular media playback system to modify the cloud queue; and

wherein providing, to the particular media playback system, the type of access to the media items that the authorization token authenticates to the particular media playback system comprises;

receiving, from the particular media playback system over the network interface, data indicating one or more modifications to the cloud queue; and

based on the authorization token that grants the second type of access to the cloud queue of media items, permitting the one or more modifications to the cloud queue.