Secure sidecar container
US-2024330031-A1 · Oct 3, 2024 · US
US11057394B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-11057394-B2 |
| Application number | US-201916436708-A |
| Country | US |
| Kind code | B2 |
| Filing date | Jun 10, 2019 |
| Priority date | Dec 28, 2012 |
| Publication date | Jul 6, 2021 |
| Grant date | Jul 6, 2021 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Methods, systems and devices to authorize access to a simultaneous media streams are described. After a first media stream is initiated with a first client device, an authorization service receives a request to establish the simultaneous second media stream with a second client device. The service determines whether the second client device is at a geographic location where simultaneous streaming is allowed, and grants or denies access to the second simultaneous stream accordingly.
Opening claim text (preview).
What is claimed is: 1. An automated process executed by a computer system to authorize access to a media stream by a mobile device that is communicating with the computer system from a geographic location via a cellular network, the method comprising: receiving a request from the mobile device at the computer system, wherein the request was transmitted by the mobile device on the cellular network and comprises a network address that uniquely identifies the mobile device on the cellular network; verifying that a different device previously authorized by the computer system is receiving a simultaneous media stream, wherein the different device is communicating with the computer system via a local area network that is different from the cellular network using a different network address, and wherein the simultaneous media stream is received by the different device via the local area network; determining, by the computer system, if the mobile device and the different device are both located in the same geographic location, wherein the determining comprises providing the network address of the mobile device on the cellular network and the different network address of the different device on the local area network to a geographic database, and the computer system receiving in response information identifying the geographic locations of the mobile device and the different device based upon the network address and the different address, respectively; and granting the mobile device, by the computer system, access to the media stream via the cellular network that is different from the local area network only if the mobile device is determined, based upon the response information, to be located at the same geographic location as the different device previously authorized by the computer system and otherwise denying the mobile device access to the media stream via the cellular network. 2. The automated process of claim 1 wherein the media stream is authorized if the geographic locations of the mobile and different devices are determined based upon data from the geolocation database to be within a threshold distance of each other. 3. The automated process of claim 1 wherein the simultaneous second media stream is authorized if the geographic locations of the first and second client devices are within a threshold distance of each other even though the network addresses used by the first and second client devices are different. 4. The automated process of claim 1 wherein the mobile and different devices are determined to operate at the same geographic location if the first network address is determined to be operating within a predetermined distance from the second network address. 5. The automated process of claim 1 wherein the request identifies a type of the mobile device, and wherein the determining considers the type of the mobile device. 6. The automated process of claim 1 wherein the local area network is an IEEE 802.11 network that couples the different device to a router. 7. The automated process of claim 1 wherein the local area network is an IEEE 802.4 network that couples the different device to a router. 8. A computer system to authorize access to a media stream by a mobile device operating at a geographic location, the computer system comprising: an interface to a network; a processor configured to receive a request to establish the media stream with the mobile device that is transmitted by the mobile device via a cellular network, to determine whether the mobile device is located at a same geographic location as a different client device that is simultaneously receiving a previously-approved media stream at the same geographic location but via a different network other than the cellular network, and, if the mobile device is located at the same geographic location as the different client device, to grant the mobile device simultaneous access to the media stream via the cellular network, and to otherwise deny the access to the media stream by the mobile device; and a geolocation database stored on a digital storage medium, wherein the geolocation database is configured to receive network addresses from the processor and to responsively provide response information indicating the geographic locations of the different client device and the mobile device to the processor based upon the network addresses, wherein the mobile device operates on the cellular network with a first address and the different client device operates on the different network other than the cellular network with a second address; wherein the processor grants the mobile device access to the simultaneous media stream via the cellular network only if response information from the geolocation database indicates that the mobile device is physically located at the same geographic location as the different client device receiving the previously-approved media stream even though the first and second addresses indicate that the mobile device and the different client device are operating on different networks. 9. The computer system of claim 8 further comprising an account database that comprises data associated with each of a plurality of users, wherein the processor is further configured to query the account database to verify that the mobile device and the different client device are both associated with a same one of the plurality of users. 10. The computer system of claim 9 wherein the local area network is an IEEE 802.11 network that couples the different device to a router. 11. The computer system of claim 9 wherein the local area network is an IEEE 802.4 network that couples the different device to a router.
Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} · CPC title
for unicast · CPC title
Network streaming of media packets · CPC title
for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title
wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.