Credential delegation

Patent metadata

Field	Value
Publication number	US-10785221-B2
Application number	US-201815970622-A
Country	US
Kind code	B2
Filing date	May 3, 2018
Priority date	May 16, 2017
Publication date	Sep 22, 2020
Grant date	Sep 22, 2020

Abstract

In some implementations, a computing system can be configured so that a first user device can delegate a first user's media account credentials to second user device corresponding to a second user. For example, a playback device may be configured with the second user's media account credentials for accessing media items through a network media service. A first user may wish to play media items associated with the first user's media account credentials on the playback device. To do so, the first user device can request a device identifier for the playback device, request and obtain a delegate token for the device identifier from the media service, and provide the delegate token along with media item information to the playback device. The playback device can then use the delegate token to request the media item associated with the first user's media access account.

First claim

What is claimed is:

1. A method comprising:
receiving, by a first computing device, a playback queue from a second computing device, wherein the playback queue includes one or more media items, and wherein each of the one or more media items comprises a media item identifier, a first account identifier, and a delegate token;
selecting, by the first computing device, a media item from the one or more media items for playback by the first computing device;
determining, by the first computing device, that the media item is associated with the first account identifier that is distinct from a second account identifier configured for the first computing device, wherein the media item is not accessible using the second account identifier configured on the first computing device;
sending, by the first computing device, a media asset request to a third computing device, the media asset request including the media item identifier, the first account identifier, the delegate token, and a device identifier for the first computing device;
receiving, by the first computing device, a media asset corresponding to the media item identifier responsive to the third computing device validating the delegate token based on the first account identifier and the device identifier; and
presenting, by the first computing device, the media asset corresponding to the selected media item.

2. The method of claim 1 , wherein the delegate token allows the first computing device associated with the second account identifier to access the media item through a media service account corresponding to the first account identifier.

3. The method of claim 1 , wherein the first account identifier identifies a user account used to enqueue the media item in the playback queue.

4. The method of claim 1 , wherein the delegate token can only be used by the first computing device to access the media item.

5. The method of claim 1 , wherein the delegate token is generated by the third computing device.

6. The method of claim 1 , wherein the delegate token is stored by the third computing device in association with the first account identifier and the device identifier of the first computing device.

7. The method of claim 1 , wherein the media item further comprises a time offset indicating a current position of playback for the media item responsive to the media item being selected for playback by the first computing device concurrent to the media item playing on the second computing device.

8. The method of claim 1 , further comprising:
displaying, by the first computing device, a user interface on a lock screen of the first computing device; and
receiving, by the first computing device, user input selecting transfer of the playback queue from the second computing device, wherein the playback queue is received from the second computing device responsive to user selection of transferring the playback queue.

9. A non-transitory computer readable medium including one or more sequences of instructions that, when executed by one or more processors, cause the processors to perform operations comprising:
receiving, by a first computing device, a playback queue from a second computing device, wherein the playback queue includes one or more media items, and wherein each of the one or more media items comprises a media item identifier, a first account identifier, and a delegate token;
selecting, by the first computing device, a media item from the one or more media items for playback by the first computing device;
determining, by the first computing device, that the media item is associated with the first account identifier that is distinct from a second account identifier configured for the first computing device, wherein the media item is not accessible using the second account identifier configured on the first computing device;
sending, by the first computing device, a media asset request to a third computing device, the media asset request including the media item identifier, the first account identifier, the delegate token, and a device identifier for the first computing device;
receiving, by the first computing device, a media asset corresponding to the media item identifier responsive to the third computing device validating the delegate token based on the first account identifier and the device identifier; and
presenting, by the first computing device, the media asset corresponding to the selected media item.

10. The non-transitory computer readable medium of claim 9 , wherein the delegate token allows the first computing device associated with the second account identifier to access the media item through a media service account corresponding to the first account identifier.

11. The non-transitory computer readable medium of claim 9 , wherein the first account identifier identifies a user account used to enqueue the media item in the playback queue.

12. The non-transitory computer readable medium of claim 9 , wherein the delegate token can only be used by the first computing device to access the media item.

13. The non-transitory computer readable medium of claim 9 , wherein the delegate token is generated by the third computing device.

14. The non-transitory computer readable medium of claim 9 , wherein the delegate token is stored by the third computing device in association with the first account identifier and the device identifier of the first computing device.

15. A system comprising:
one or more processors; and
a non-transitory computer readable medium including one or more sequences of instructions that, when executed by one or more processors, cause the processors to perform operations comprising:
receiving, by a first computing device, a playback queue from a second computing device, wherein the playback queue includes one or more media items, and wherein each of the one or more media items comprises a media item identifier, a first account identifier, and a delegate token;
selecting, by the first computing device, a media item from the one or more media items for playback by the first computing device;
determining, by the first computing device, that the media item is associated with the first account identifier that is distinct from a second account identifier configured for the first computing device, wherein the media item is not accessible using the second account identifier configured on the first computing device;
sending, by the first computing device, a media asset request to a third computing device, the media asset request including the media item identifier, the first account identifier, the delegate token, and a device identifier for the first computing device;
receiving, by the first computing device, a media asset corresponding to the media item identifier responsive to the third computing device validating the delegate token based on the first account identifier and the device identifier; and
presenting, by the first computing device, the media asset corresponding to the selected media item.

16. The system of claim 15 , wherein the delegate token allows the first computing device associated with the second account identifier to access the media item through a media service account corresponding to the first account identifier.

17. The system of claim 15 , wherein the first account identifier identifies a user account used to enqueue the media item in the playback queue.

18. The system of claim 15 , wherein the delegate token can only be used by the first computing device to access the media item.

19. The system of claim 15 , wherein the dele

Assignees

• Apple Inc

Inventors

• Graham David C
• Carrigan Taylor G
• Paulson Nicholas J
• Schmidt Johannes P
• Alsina Thomas
• Bradley Bob
• Ye Haishan
• Grandy James C
• De Lastic Pierre
• Lerouge Julien

Classifications

• H04N21/4126

  The peripheral being portable, e.g. PDAs or mobile phones · CPC title

• H04W4/021

  Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences · CPC title

• H04L63/0807 Primary

  using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213) · CPC title

• G06F2221/2145

  Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy · CPC title

• H04N21/25875

  involving end-user authentication (restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06) · CPC title