Global access control for segmented streaming delivery

• US 8,862,754 B2
• Filed: 07/06/2012
• Issued: 10/14/2014
• Est. Priority Date: 09/26/2011
• Status: Active Grant

• Current Assignee: Brightcove Incorporated
• Original Assignee: Brightcove Incorporated
• Inventors: McGowan, Albert John
• Primary Examiner(s): Luu, Le H
• Application Number:
  US13/543,045
• Publication Number:
  US 20130081110A1
• Time in Patent Office: 830 Days
• Field of Search: 709/227, 709/228, 709/229, 709/217, 709/218, 709/219, 709/231, 725/25, 725/87, 455/414.1, 713/170, 713/156, 380/281, 726/26
• US Class Current: 709/229
• CPC Class Codes: H04L 65/00 Network arrangements, protocols or services for supporting real-time applications in data packet communication real-time or near real-time messaging, e.g. instant messaging [IM] H04L51/04; selective video distribution H04N21/00
• CPC Class Codes: H04L 65/1066 Session management
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 65/1094 Inter-user-equipment sessions transfer or sharing
• CPC Class Codes: H04L 65/762 at the source reformatting of additional data in video distribution servers H04N21/2355
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/148 Migration or transfer of sessions
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Various arrangements for controlling access to streaming media assets are presented. Transmission of segments of a media asset to a first user device may be commenced. During transmission of the media asset to the first user device, beaconing data from the first user device may be received and stored as session information. The first user device may no longer be permitted to receive the media asset at least partially due to the first user device no longer being authenticated. Transmission of a remainder of the plurality of media segments to the first user device may be ceased such that the first user device does not receive the media asset in its entirety.

Claims

1. A method for controlling access to media assets during streaming, the method comprising:

commencing transmission of a media asset to a first computerized device, wherein

transmission of the media asset comprises transmission of a plurality of media segments;

receiving, during transmission of the media asset, beaconing data from the first computerized device, wherein

the beaconing data is based on chunk requests, index fix requests, or both, received from the first computerized device;

storing session information linked with the first computerized device, wherein

the session information is at least partially based on the beaconing data received from the first computerized device;

receiving authentication information linked with a second computerized device while transmission of the plurality of media segments to the first computerized device is occurring;

determining the second computerized device is not permitted to receive the media asset based on the session information; and

denying access to the second computerized device based on the session information linked with the first computerized device.

2. The method for controlling access to media assets during streaming of claim 1, wherein

transmission of the media asset to the first computerized device occurs via a content data network.

3. The method for controlling access to media assets during streaming of claim 1, further comprising:

receiving authentication information linked with the first user device that indicates a user account, wherein

the authentication information linked with the second computerized device indicates the user account;

transmitting at least a portion of the authentication information linked with the first computerized device and the user account to a content provider computer system; and

receiving, from the content provider computer system, a response indicating the first user device is authorized to receive the media asset, wherein

the response, indicating the first user device is authorized to receive the media asset, is received prior to commencing transmission of the media asset to the first user device linked with the user account.

4. The method for controlling access to media assets during streaming of claim 3, further comprising:

transmitting at least a portion of the authentication information linked with the second computerized device and the user account to the content provider system; and

receiving from the content provider computer system, a second response indicating the second user device is authorized to receive a second media asset.

5. The method for controlling access to media assets during streaming of claim 1, wherein the media asset is a video provided by a content provider accessible on a subscription basis.

6. A computer program product residing on a non-transitory processor-readable medium for controlling access to media assets during streaming, the computer program product comprising computer-readable instructions configured to cause a computer system to:

commence transmission of a media asset to a first computerized device, wherein

transmission of the media asset comprises transmission of a plurality of media segments;

receive, during transmission of the media asset, beaconing data from the first computerized device, wherein

the beaconing data is based on chunk requests, index fix requests, or both, received from the first computerized device;

store session information linked with the first computerized device, wherein

the session information is at least partially based on the beaconing data received from the first computerized device;

receive authentication information linked with a second computerized device while transmission of the plurality of media segments to the first computerized device is occurring;

determine the second computerized device is not permitted to receive the media asset based on the session information; and

deny access to the second computerized device based on the session information linked with the first computerized device.

7. The computer program product for controlling access to media assets during streaming of claim 6, wherein

transmission of the media asset to the first computerized device occurs via a content data network.

8. The computer program product for controlling access to media assets during streaming of claim 6, wherein the computer-readable instructions further comprise computer-readable instructions configured to cause the computer system to:

receive authentication information linked with the first user device that indicates a user account, wherein

the authentication information linked with the second computerized device indicates the user account;

transmit at least a portion of the authentication information linked with the first computerized device and the user account to a content provider computer system; and

receive, from the content provider computer system, a response indicating the first user device is authorized to receive the media asset, wherein

the response, indicating the first user device is authorized to receive the media asset, is received prior to commencing transmission of the media asset to the first user device linked with the user account.

9. The computer program product for controlling access to media assets during streaming of claim 8, wherein the computer-readable instructions further comprise computer-readable instructions configured to cause the computer system to:

transmit at least a portion of the authentication information linked with the second computerized device and the user account to the content provider system; and

receive from the content provider computer system, a second response indicating the second user device is authorized to receive a second media asset.

10. The computer program product for controlling access to media assets during streaming of claim 6, wherein the media asset is a video provided by a content provider accessible on a subscription basis.

11. A system for controlling access to media assets during streaming, the system comprising:

one or more processors; and

a memory communicatively coupled with and readable by the one or more processors and having stored therein processor-readable instructions which, when executed by the one or more processors, cause the one or more processors to;

commence transmission of a media asset to a first computerized device, wherein

transmission of the media asset comprises transmission of a plurality of media segments;

receive, during transmission of the media asset, beaconing data from the first computerized device, wherein

the beaconing data is based on chunk requests, index fix requests, or both, received from the first computerized device;

store session information linked with the first computerized device, wherein

the session information is at least partially based on the beaconing data received from the first computerized device;

receive authentication information linked with a second computerized device while transmission of the plurality of media segments to the first computerized device is occurring;

determine the second computerized device is not permitted to receive the media asset based on the session information; and

deny access to the second computerized device based on the session information linked with the first computerized device.

12. The system for controlling access to media assets during streaming of claim 11, wherein the processor-readable instructions which, when executed by the one or more processors, cause the one or more processors to:

receive authentication information linked with the first user device that indicates a user account, wherein

the authentication information linked with the second computerized device indicates the user account;

cause at least a portion of the authentication information linked with the first computerized device and the user account to be transmitted to a content provider computer system; and

receive, from the content provider computer system, a response indicating the first user device is authorized to receive the media asset, wherein

the response, indicating the first user device is authorized to receive the media asset, is received prior to commencing transmission of the media asset to the first user device linked with the user account.

13. The system for controlling access to media assets during streaming of claim 12, wherein the processor-readable instructions which, when executed by the one or more processors, cause the one or more processors to:

cause at least a portion of the authentication information linked with the second computerized device and the user account to be transmitted to the content provider system; and

receive from the content provider computer system, a second response indicating the second user device is authorized to receive a second media asset.

14. The system for controlling access to media assets during streaming of claim 11, wherein the one or more processors are distributed.