Content access authentication for dynamic adaptive streaming over hypertext transfer protocol

Patent metadata

Field	Value
Publication number	US-9497180-B2
Application number	US-201414487714-A
Country	US
Kind code	B2
Filing date	Sep 16, 2014
Priority date	Oct 21, 2013
Publication date	Nov 15, 2016
Grant date	Nov 15, 2016

Abstract

A technology that is operable to authenticate content access for dynamic adaptive streaming over hypertext transfer protocol (HTTP) (DASH) is disclosed. In one embodiment, a client device is configured with circuitry to communicate, to a content server, a request for a media presentation description (MPD). An MPD message is received from the content server indicating one or more content authorization elements to access content at the content server. A request for authorization of the client device to access content at the content server is communicated to an authorization server, when the client device is configured to perform the content authorization elements in the MPD message. An authorization message is received from the authorization server. A content request message requesting one or more DASH segments is communicated to the content server.

First claim

What is claimed is:

1. A client device operable to authenticate content access for dynamic adaptive streaming over hypertext transfer protocol (HTTP) (DASH), having circuitry configured to:
communicate, to a content server, a request for a media presentation description (MPD);
receive, from the content server, an MPD message indicating one or more content authorization elements to access content at the content server, wherein the one or more content authorization elements include a use attribute to indicate a mandatory (M) use of the one or more content authorization elements, an optional (O) use of the one or more content authorization elements, or a conditionally mandatory (CM) use of the one or more content authorization elements in the MPD message;
communicate, to an authorization server, a request for authorization of the client device to access content at the content server, when the client device is configured to perform the content authorization elements in the MPD message;
receive, from the authorization server, an authorization message, wherein the authorization message includes a decryption key for decrypting selected content at the content server;
determine, by the client device, the client device is authorized to access selected content at the content server and is a trusted client using the MPD based on the received authorization message, wherein only the client device that is the trusted client having the received decryption key is authorized to access the selected content; and
in response to determining, communicate from the client device to the content server, a content request message requesting one or more DASH segments.

2. The circuitry of claim 1 , further configured to receive, from the content server, the requested one or more DASH segments based on a content access authorization level of the client device.

3. The circuitry of claim 1 , wherein the content request message includes information from the authorization message indicating an authorization level of the UE to access the requested one or more DASH segments.

4. The circuitry of claim 1 , wherein the authorization message includes an authorization token for accessing selected content at the content server.

5. The circuitry of claim 4 , wherein the content request message includes the authorization token indicating an authorization level of the client device to access content of the content server.

6. The circuitry of claim 1 , further configured to:
receive, from the content server, the requested one or more DASH segments; and
decrypt the one or more DASH segments from the content server using the decryption key.

7. A content server operable to authenticate content access for dynamic adaptive streaming over hypertext transfer protocol (HTTP) (DASH), having circuitry configured to:
receive, from a client device, a request for a media presentation description (MPD);
communicate, to the client device, an MPD message indicating one or more content authorization elements for accessing content at the content server, wherein the one or more content authorization elements include a use attribute to indicate a mandatory′ (M) use of the one or more content authorization elements, an optional (O) use of the one or more content authorization elements, or a conditionally mandatory″ (CM) use of the one or more content authorization elements in the MPD message, and wherein the client device communicates, to an authorization server, a request for authorization of the client device to access content at the content server, when the client device is configured to perform the content authorization elements in the received MPD message;
receive, from the client device, a content request message requesting one or more DASH segments, when the client device is configured to perform the content authorization elements in the MPD message after (a) the client device receives, from the authorization server, an authorization message, wherein the authorization message includes a decryption key for decrypting selected content at the content server and (b) the client device determines it is authorized to access selected content at the content server and it is a trusted client using the MPD based on the received authorization message and the decryption key.

8. The circuitry of claim 7 , further configured to communicate, to the client device, the requested one or more DASH segments based on a content access authorization level of the client device.

9. The circuitry of claim 7 , wherein the content request message includes an authorization token indicating an authorization level of the client device to access content of the content server.

10. The circuitry of claim 7 , further configured to receive, from an authorization server, an authorization notification indicating that the client device is authorized to access selected content at the content server.

11. The circuitry of claim 7 , further configured to restrict or deny access by the client device to content at the content server when an authorization notification is not received from an authorization server.

12. The circuitry of claim 7 , wherein the MPD message includes information indicating a procedure for receiving authorization or authentication to access selected content at the content server.

13. The circuitry of claim 12 , wherein the MPD message can include initialization parameters, authorization protocol information, or authentication protocol information for initiating an authorization procedure or an authentication procedure.

14. The circuitry of claim 13 , wherein the initialization parameters, the authorization protocol information, or the authentication protocol information include a uniform resource locator (URL) of an authorization server to use for the procedure for authorization or authentication to access the selected content at the content server.

15. The circuitry of claim 12 , wherein authentication elements or access authorization elements to access DASH content are included in a descriptor of the MPD declared at: a MPD hierarchy level of a common adaptation set, representation attributes and elements, or a sub-representation attributes and elements.

16. A software product embedded in a non-transitory storage medium having stored thereon instructions that are adapted to be executed to implement a method of authenticating content access for dynamic adaptive streaming over hypertext transfer protocol (HTTP) (DASH), the method comprising:
receiving, from a client device, a request for authorization to access selected content at a content server, when the client device is configured to perform the content authorization elements received at the client device in an MPD message, wherein the one or more content authorization elements include a use attribute to indicate a mandatory′ (M) use of the one or more content authorization elements, an optional (O) use of the one or more content authorization elements, or a conditionally mandatory″ (CM) use of the one or more content authorization elements in the MPD message;
communicate, from the client device to an authorization server, a request for authorization of the client device to access content at the content server, when the client device is configured to perform the content authorization elements in the MPD message;
communicating, from the authorization server to the client device, an authorization message indicating an authorization level of the client device to access the selected content at the content server, wherein the authorization message includes a decryption key for the client device to decrypt selected content received

Assignees

• Intel Ip Corp

Inventors

• Oyman Ozgur

Classifications

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04L65/80

  Responding to QoS · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title