Self-validating data object locator for a media asset

Patent metadata

Field	Value
Publication number	US-11568016-B2
Application number	US-202217704661-A
Country	US
Kind code	B2
Filing date	Mar 25, 2022
Priority date	Apr 17, 2012
Publication date	Jan 31, 2023
Grant date	Jan 31, 2023

Abstract

Aspects of the disclosure relate to validation of a request for an asset based on information in the request. Validation of the request can be processed by a network node in a network repository that contains the asset. In one aspect, validation of the request can comprise determining if the request is legitimate based at least on processing at least a portion of the information in the request. In response to a legitimate request, the network node can process the request and, as a result, a data object associated with the asset can be supplied to a device originating the request. In the alternative, the network node can yield an exception.

First claim

The invention claimed is:

1. A system comprising:
a user device configured to:
send a request for a content fragment, wherein the request comprises a Uniform Resource Locator (URL) comprising a first portion comprising a first identifier identifying a key value and a second portion comprising a second identifier comprising a reference hash value; and

a first network node configured to:
receive the request for the content fragment;
determine, based on the first portion, that the key value maps to the first identifier;
based on the key value mapping to the first identifier, determine, using the first identifier, that the key value is valid;
based on the key value being valid, hash the first portion of the URL using the key value;
determine, based on a value of hashing the first portion of the URL matching the reference hash value, that the request is legitimate; and
send, based on the request being legitimate, the request to a second network node.

2. The system of claim 1 , wherein the first network node is further configured to:
receive the content fragment from the second network node in response to sending the request to the second network node.

3. The system of claim 1 , wherein the first network node is further configured to:
send an error notification to a third network node in response to the request being determined to be non-legitimate.

4. The system of claim 1 , wherein the first network node is further configured to determine that the request is legitimate based on the value of hashing the first portion of the URL matching the reference hash value by:
validating the first identifier;
determining, based on the first identifier being valid, a value signed by the key value by evaluating a function of data indicative of the first portion of the URL; and
determining that the request is legitimate based on the value being equal to the reference hash value.

5. The system of claim 1 , wherein the first network node is further configured to validate the first identifier by:
determining that the first identifier is present in a mapping relating at least one key identifier to at least one key value.

6. The system of claim 1 , wherein the first identifier is included in a manifest associated with the content fragment.

7. The system of claim 1 , wherein the request is encoded according to a web-based communication protocol comprising at least one of: a hypertext transfer protocol (HTTP), a simple object access protocol (SOAP), or a simple network management protocol (SNMP).

8. One or more non-transitory computer-readable media storing processor-executable instructions that, when executed by at least one processor, cause the at least one processor to:
receive a request for a content fragment, wherein the request comprises a Uniform Resource Locator (URL) comprising a first portion comprising a first identifier identifying a key value and a second portion comprising a second identifier comprising a reference hash value;
determine, based on the first portion, that the key value maps to the first identifier;
based on the key value mapping to the first identifier, determine, using the first identifier, that the key value is valid;
based on the key value being valid, hash the first portion of the URL using the key value;
determine, based on a value of hashing the first portion of the URL matching the reference hash value, that the request is legitimate; and
send, based on the request being legitimate, the request to a network node.

9. The one or more non-transitory computer-readable media of claim 8 , wherein the processor-executable instructions that, when executed by the at least one processor, further cause the at least one processor to:
receive the content fragment from the network node in response to sending the request to the network node.

10. The one or more non-transitory computer-readable media of claim 8 , wherein the processor-executable instructions that, when executed by the at least one processor, further cause the at least one processor to:
send an error notification to a second network node in response to the request being determined to be non-legitimate.

11. The one or more non-transitory computer-readable media of claim 8 , wherein the processor-executable instructions that, when executed by the at least one processor, cause the at least one processor to determine that the request is legitimate based on the value of hashing the first portion of the URL matching the reference hash value, further cause the at least one processor to:
validate the first identifier;
determine, based on the first identifier being valid, a value signed by the key value by evaluating a function of data indicative of the first portion of the URL; and
determine that the request is legitimate based on the value being equal to the reference hash value.

12. The one or more non-transitory computer-readable media of claim 8 , wherein the processor-executable instructions that, when executed by the at least one processor, cause the at least one processor to validate the first identifier, further cause the at least one processor to:
determine that the first identifier is present in a mapping relating at least one key identifier to at least one key value.

13. The one or more non-transitory computer-readable media of claim 8 , wherein the first identifier is included in a manifest associated with the content fragment.

14. The one or more non-transitory computer-readable media of claim 8 , wherein the request is encoded according to a web-based communication protocol comprising at least one of: a hypertext transfer protocol (HTTP), a simple object access protocol (SOAP), or a simple network management protocol (SNMP).

15. A system comprising:
a user device configured to:
generate a request for a content fragment, wherein the request comprises a Uniform Resource Locator (URL) comprising a first portion comprising a first value identifying a key value and a second portion comprising a second value comprising a predetermined hash value;
determine, based on the first portion, that the key value maps to the first value;
based on the key value mapping to the first value, determine, using the first value, that the key value is valid;
based on the key value being valid, hash the first portion of the URL using the key value; and
send, based on the request being valid, the request for the content fragment to a first network node; and

the first network node configured to:
receive the request for the content fragment,
validate the request based on a value of hashing the first portion of the URL matching the predetermined hash value, wherein the second portion of the URL comprises the first value and the second value, and
send the request to a second network node when the value of hashing the first portion of the URL matches the predetermined hash value.

16. The system of claim 15 , wherein the first value is included in a key-ID-key-value mapping relating at least one key identifier to at least one key value.

17. The system of claim 15 , wherein the user device is further configured to generate the request for the content fragment by:
formatting the request for the content fragment according to a specific communication protocol.

18. The system of claim 17 , wherein the user device is further configured to format the request for the content fragment according to the specific communication protocol by:
formatting the request for the content fragment according to a web-based communication protocol comprising at least one of: a hypertext t

Assignees

• Comcast Cable Comm Llc

Inventors

• Field Brian
• Van Doorn Jan

Classifications

• H04L63/1458

  Denial of Service · CPC title

• H04L67/568

  Storing data temporarily at an intermediate stage, e.g. caching · CPC title

• G06F16/9566 Primary

  URL specific, e.g. using aliases, detecting broken or misspelled links · CPC title

• G06F21/10

  Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} · CPC title

• H04L65/612

  for unicast · CPC title