Securing content using pipelines

Patent metadata

Field	Value
Publication number	US-10277670-B2
Application number	US-201715783626-A
Country	US
Kind code	B2
Filing date	Oct 13, 2017
Priority date	Jan 25, 2013
Publication date	Apr 30, 2019
Grant date	Apr 30, 2019

Abstract

A transcoding service is described that is capable of transcoding or otherwise processing content, such as video, audio or multimedia content, by utilizing one or more pipelines. A pipeline can enable a user to submit transcoding jobs (or other processing jobs) into an available pipeline, where a transcoding service (or other such service) assigns one or more computing resources to process the jobs received to each pipeline. The transcoding service and the pipelines can be provided by at least one service provider (e.g., a cloud computing provider) or other such entity to a plurality of customers. A service provider can also provide the computing resources (e.g., servers, virtual machines, etc.) used to process the transcoding jobs from the pipelines.

First claim

What is claimed is:

1. A computer implemented method to process content, the method comprising:
providing a plurality of pipelines corresponding to a customer account to schedule transcoding jobs, the customer account associated with a plurality of users;
allowing a first set of permissions to be associated with a pipeline of the plurality of pipelines, the permissions granting the transcoding jobs in the pipeline access to content stored in the at least one content store;
allocating a portion of one or more computing resources to the pipeline to transcode the content stored in the at least one content store;
allowing a second set of permissions to be associated with a subset of the plurality of users, the second set of permissions allowing the subset of users to submit the transcoding jobs to the pipeline;
obtaining, from a user, a request to submit a transcoding job to the pipeline, the transcoding job corresponding to content stored in the content store;
determining whether the user has been granted the second set of permissions and whether the pipeline has been granted the first set of permissions;
scheduling the transcoding job to the pipeline in response to determining that the user has been granted the second set of permissions and that the pipeline has been granted the first set of permissions; and
modifying the portion of the one or more computing resources allocated to the pipeline based at least in part on the scheduling.

2. The computer implemented method of claim 1 , wherein the portion of the one or more computing resources is a predetermined allocation of the one or more computing resources.

3. The computer implemented method of claim 1 , wherein scheduling the transcoding job to the pipeline further comprises:
providing a session token to at least the portion of the one or more computing resources, the session token granting permissions to access the content stored in the at least one content store.

4. A computer implemented method, comprising:
allowing a first set of permissions to be associated with a pipeline of the plurality of pipelines, the permissions granting transcoding jobs in the pipeline access to content stored in at least one content store;
allocating a portion of one or more computing resources to the pipeline to transcode the content stored in the at least one content store;
allowing a second set of permissions to be associated with a subset of the plurality of users, the second set of permissions allowing the subset of users to submit the transcoding jobs to the pipeline;
controlling access to submitting the transcoding jobs in the pipeline based at least in part on the second set of permissions and the first set of permissions; and
modifying the portion of the one or more computing resources allocated to the pipeline based at least in part on controlling access to submitting the transcoding jobs.

5. The computer implemented method of claim 4 , wherein controlling access to submitting the transcoding jobs to the pipeline further comprises:
obtaining, from a user, a request to submit a transcoding job to the pipeline;
determining that the user is granted the second set of permissions; and
allowing the user to submit the transcoding job to the pipeline.

6. The computer implemented method of claim 4 , wherein the first set of permissions further comprises minimum read and write permissions to one or more media files stored in the at least one content store.

7. The computer implemented method of claim 5 , wherein the plurality of pipelines is associated with a customer account, wherein the user is a privileged user in the customer account, and
wherein the user is enabled to assign the second set of permissions to a group of users, the group of users corresponding to a department of the customer account.

8. The computer implemented method of claim 5 , wherein the user is granted the second set of permissions to submit the one or more transcoding jobs to the pipeline, and wherein the user is denied the first set of permissions to access the content stored in the at least one content store.

9. The computer implemented method of claim 4 , wherein enabling the first set of permissions further comprises:
assigning the pipeline permissions to access content stored in an input store; and
assigning the pipeline permissions to write content to an output store.

10. The computer implemented method of claim 4 , wherein the one or more transcoding jobs are processed from the pipeline by assigning one or more computing resource to transcode content stored in the at least one content store from a first format into a second format.

11. A computing device, comprising:
at least one processor; and
memory including instructions that, when executed by the at least one processor, cause the computing device to:
allow a first set of permissions to be associated with a pipeline of the plurality of pipelines, the permissions granting transcoding jobs in the pipeline access to content stored in at least one content store;
allocate a portion of one or more computing resources to the pipeline to transcode the content stored in the at least one content store;
allow a second set of permissions to be associated with a subset of the plurality of users, the second set of permissions allowing the subset of users to submit the transcoding jobs to the pipeline;
control access to submitting the transcoding jobs in the pipeline based at least in part on the second set of permissions and the first set of permissions; and
modify the portion of the one or more computing resources allocated to the pipeline based at least in part on controlling access to submitting the transcoding jobs.

12. The computing device of claim 11 , wherein the memory further includes instructions that, when executed by the at least one processor, cause the computing device to:
obtain, from a user, a request to submit a transcoding job to the pipeline;
determine that the user is granted the second set of permissions and whether the pipeline has been granted the first set of permissions;
allow the user to submit the transcoding job to the pipeline; and
schedule the transcoding job to the pipeline in response to the user submitting the transcoding job.

13. The computing device of claim 11 , wherein the portion of the one or more computing resources is a predetermined allocation of the one or more computing resources.

14. The computer implemented method of claim 12 , wherein the memory further includes instructions that, when executed by the at least one processor, cause the computing device to:
provide a session token to at least the portion of the one or more computing resources, the session token granting permissions to access the content stored in the at least one content store.

15. The computing device of claim 12 , wherein the plurality of pipelines is associated with a customer account, wherein the user is a privileged user in the customer account, and wherein the user is enabled to assign the second set of permissions to a group of users, the group of users corresponding to a department of the customer account.

16. The computing device of claim 11 , wherein the memory further includes instructions that, when executed by the at least one processor, cause the computing device to:
assign the pipeline permissions to access content stored in an input store; and
assign the pipeline permissions to write content to an output store.

17. A non-transitory computer readable storage medium storing one or more sequences of instructions executable by one or more processors to perf

Assignees

• Amazon Tech Inc

Inventors

• Corley Jonathan B
• Sayed David Idris Alexander
• Hawes Christopher Neil
• Marshall Bradley Eugene
• Carrig James J
• Ramsden Jeffrey Paul

Classifications

• G06F21/10 Primary

  Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} · CPC title

• H04N19/436

  using parallelised computational arrangements · CPC title

• H04N19/395

  involving distributed video coding [DVC], e.g. Wyner-Ziv video coding or Slepian-Wolf video coding · CPC title

• G06F21/62

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title

• H04L67/10 Primary

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title