Securing content using pipelines

Patent metadata

Field	Value
Publication number	US-10855751-B2
Application number	US-201916397540-A
Country	US
Kind code	B2
Filing date	Apr 29, 2019
Priority date	Jan 25, 2013
Publication date	Dec 1, 2020
Grant date	Dec 1, 2020

Abstract

A transcoding service is described that is capable of transcoding or otherwise processing content, such as video, audio or multimedia content, by utilizing one or more pipelines. A pipeline can enable a user to submit transcoding jobs (or other processing jobs) into an available pipeline, where a transcoding service (or other such service) assigns one or more computing resources to process the jobs received to each pipeline. The transcoding service and the pipelines can be provided by at least one service provider (e.g., a cloud computing provider) or other such entity to a plurality of customers. A service provider can also provide the computing resources (e.g., servers, virtual machines, etc.) used to process the transcoding jobs from the pipelines.

First claim

What is claimed is:

1. A computer implemented method for processing content, the method comprising:
allocating a portion of one or more computing resources to a pipeline of a plurality of pipelines to transcode content stored in at least one content store;
enabling a set of permissions to be associated with a subset of a plurality of users, the set of permissions allowing the subset of users to submit transcoding jobs to the pipeline, wherein the subset of users is denied access to the content stored in the at least one content store based on the set of permissions;
receiving, from a user, a request to submit a transcoding job to the pipeline, the transcoding job corresponding to the content stored in the at least one content store;
determining that the set of permissions is not applicable to the user at a present time;
determining that the set of permissions will become applicable to the user at a later time;
scheduling the transcoding job to the pipeline in response to determining that the set of permissions will become applicable to the user at the later time; and
modifying the portion of the one or more computing resources allocated to the pipeline based at least in part on the scheduling.

2. The computer implemented method of claim 1 , wherein the portion of the one or more computing resources is a predetermined allocation of the one or more computing resources.

3. The computer implemented method of claim 1 , wherein scheduling the transcoding job to the pipeline further comprises:
providing a session token to at least the portion of the one or more computing resources, the session token granting permissions to access the content stored in the at least one content store.

4. A computer implemented method, comprising:
allocating a portion of one or more computing resources to a pipeline of a plurality of pipelines to transcode content stored in at least one content store;
enabling a set of permissions to be associated with a subset of a plurality of users, the set of permissions allowing the subset of users to submit transcoding jobs to the pipeline, wherein the set of permissions prevents the subset of users from accessing the content stored in the at least one content store;
controlling access to submitting the transcoding jobs in the pipeline based at least in part on the set of permissions;
scheduling the transcoding job to the pipeline in response a determination that the set of permissions is not applicable to a user of the subset of users at a present time but will become applicable to the subset of users at a later time; and
modifying the portion of the one or more computing resources allocated to the pipeline based at least in part on controlling access to submitting the transcoding jobs.

5. The computer implemented method of claim 4 , wherein controlling access to submitting the transcoding jobs to the pipeline further comprises:
receiving, from the user of the subset of users, a request to submit a transcoding job to the pipeline;
determining that the user is granted the set of permissions; and
allowing the user to submit the transcoding job to the pipeline.

6. The computer implemented method of claim 4 , wherein a second set of permissions for the pipeline comprises minimum read and write permissions to one or more media files stored in the at least one content store.

7. The computer implemented method of claim 4 , wherein the portion of the one or more computing resources is a predetermined allocation of the one or more computing resources.

8. The computer implemented method of claim 4 , further comprising:
providing a session token to at least the portion of the one or more computing resources, the session token granting permissions to access the content stored in the at least one content store.

9. The computer implemented method of claim 5 , wherein the plurality of pipelines is associated with a customer account, wherein a second user is a privileged user in the customer account, and
wherein the second user is enabled to assign the set of permissions to a group of users, the group of users corresponding to a department of the customer account.

10. The computer implemented method of claim 5 , wherein the user is denied access the content stored in an output store.

11. The computer implemented method of claim 5 , further comprising:
assigning the pipeline permissions to access content stored in an input store; and
assigning the pipeline permissions to write content to an output store.

12. The computer implemented method of claim 4 , wherein the one or more transcoding jobs are processed from the pipeline by assigning one or more computing resource to transcode content stored in the at least one content store from a first format into a second format.

13. A computing device, comprising:
at least one processor; and
memory including instructions that, when executed by the at least one processor, cause the computing device to:
allocate a portion of one or more computing resources to a pipeline of a plurality of pipelines to transcode content stored in at least one content store;
enable a set of permissions to be associated with a subset of a plurality of users, the set of permissions allowing the subset of users to submit transcoding jobs to the pipeline, wherein the set of permissions prevents the subset of users from accessing the content stored in the at least one content store;
control access to submitting the transcoding jobs in the pipeline based at least in part on the set of permissions;
schedule the transcoding job to the pipeline in response a determination that the set of permissions is not applicable to a user of the subset of users at a present time but will become applicable to the subset of users at a later time; and
modify the portion of the one or more computing resources allocated to the pipeline based at least in part on controlling access to submitting the transcoding jobs.

14. The computing device of claim 13 , wherein the memory further includes instructions that, when executed by the at least one processor, cause the computing device to:
receive, from the user of the subset of users, a request to submit a transcoding job to the pipeline;
determine that the user is granted the set of permissions;
allow the user to submit the transcoding job to the pipeline; and
schedule the transcoding job to the pipeline in response to the user submitting the transcoding job.

15. The computing device of claim 14 , wherein the memory further includes instructions that, when executed by the at least one processor, cause the computing device to:
provide a session token to at least the portion of the one or more computing resources, the session token granting permissions to access the content stored in the at least one content store.

16. The computing device of claim 14 , wherein the plurality of pipelines is associated with a customer account, wherein a second user is a privileged user in the customer account, and wherein second the user is enabled to assign the set of permissions to a group of users, the group of users corresponding to a department of the customer account.

17. The computing device of claim 14 , wherein the user is denied access the content stored in an output store.

18. The computing device of claim 13 , wherein a second set of permissions for the pipeline comprises minimum read and write permissions to one or more media files stored in the at least one content store.

19. The computing device of claim 13 , wherein the portion of the one or more computing resour

Assignees

• Amazon Tech Inc

Inventors

• Corley Jonathan B
• Sayed David Idris Alexander
• Hawes Christopher Neil
• Marshall Bradley Eugene
• Carrig James J
• Ramsden Jeffrey Paul

Classifications

• G06F21/10 Primary

  Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} · CPC title

• H04N19/395

  involving distributed video coding [DVC], e.g. Wyner-Ziv video coding or Slepian-Wolf video coding · CPC title

• H04N19/40

  using video transcoding, i.e. partial or full decoding of a coded input stream followed by re-encoding of the decoded output stream · CPC title

• H04L67/10 Primary

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• G06F21/62

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title