System and method for managing entitlements to data over a network
A system and method for determining entitlement to content residing on a server. A subscriber account with a multi-channel video program distributor (MVPD) includes subscription information indicative of the services provided by the MVPD to the subscriber. A computing device operated by the subscriber sends a request for access to content controlled by the MVPD. The request is received by the MVPD and forwarded to an entitlements server. The entitlement server sends an access granted message to the MVPD when the subscriber is entitled to receive the requested content. The IP address of the subscriber computing device is used to determine whether the computing device is connected to the network via a network access device authorized by the MVPD. The “on-net” or “off-net” status of the computing device may be used to determine whether the subscriber receives the requested content and/or a quality of service level applied to the content.
1. A method for determining entitlement to receive content residing on a server via a network, the method comprising:
receiving via a processor of a multi-channel video program distributor (MVPD) server a content access request message that includes an Internet Protocol (IP) address from a subscriber computing device;
determining via the processor of the MVPD server and based on the IP address included in the received content access request message whether the subscriber computing device is connected to the network via an authorized network access device;
providing a first content to the subscriber computing device in response to determining, based on the IP address included in the received content access message, that the subscriber computing device is not connected to the network via the authorized network access device, wherein providing the first content to the subscriber computing device comprises:
sending no content to the subscriber computing device; or
sending the requested content to the subscriber computing device in accordance with a second quality-of-service level that is lower than a first quality-of-service level;
sending the received content access request message and a subscriber identifier from the MVPD server to an entitlements server in response to determining, based on the IP address included in the received content access message, that the subscriber computing device is connected to the network via the authorized network access device, the entitlements server using the subscriber identifier to determine a subscription level, the subscription level to determine subscriber entitlement to receive the requested content, and the subscriber entitlement to generate an authorization message;
receiving the authorization message in the MVPD server in response to sending the content access request message and the subscriber identifier to the entitlements server; and
determining via the processor of the MVPD server whether to provide the requested content to the subscriber computing device in accordance with the first quality-of-service level based on the received authorization message.
2. The method of claim 1 , wherein the authorized network access device is a cable modem.
3. The method of claim 1 , wherein the content is selected from the group consisting of video content, audio content, photographic content, text content, game content, and multi-media content.
4. The method of claim 1 , wherein the subscriber computing device is selected from the group consisting of a desktop computer, a laptop computer, a mobile device, a PDA, and a cell phone.
5. The method of claim 1 , wherein the network is a shared network selected from the group consisting of a shared cable network, a shared hybrid-fiber-coax network, a shared fiber network, a shared satellite network, and a shared IP network.
6. The method of claim 1 , wherein using the subscriber identifier to determine the subscription level, the subscription level to determine the subscriber entitlement to receive the requested content, and the subscriber entitlement to generate the authorization message further comprises:
identifying from the subscription level one or more channels that the subscriber computing device is entitled to receive from the MVPD server; and
determining whether the entitlement to receive the one or more channels entitles the subscriber computing device to receive the requested content.
7. The method of claim 1 , wherein the subscription level is selected from the group consisting of a list of subscribed channels, a service package descriptor indicative of a subscribed level of service, and a list of subscribed premium services.
8. The method of claim 1 , further comprising denying the requested content in response to determining based on the IP address included in the received content access message that the subscriber computing device is not connected to the network via the authorized network access device.
9. The method of claim 1 , wherein the network is selected from the group consisting of a wired network, a wireless network, a public switched network, a packet switched network, a hybrid-fiber coax network, a fiber network, and a satellite network.
10. A system for determining entitlement to receive content residing on a server via a network, the system comprising:
a content server comprising a first processor; and
an entitlements server comprising a second processor,
wherein:
the first processor is configured with software executable instructions to cause the content server to perform operations comprising:
receiving a content access request message from a subscriber computing device that includes an Internet Protocol (IP) address;
determining based on the IP address included in the received content access request message whether the subscriber computing device is connected to the network via an authorized network access device;
providing a first content to the subscriber computing device in response to determining, based on the IP address included in the received content access message, that the subscriber computing device is not connected to the network via the authorized network access device, wherein providing the first content to the subscriber computing device comprises:
sending no content to the subscriber computing device; or
sending the requested content to the subscriber computing device in accordance with a second quality-of-service level that is lower than a first quality-of-service level;
sending the received content access request message and a subscriber identifier to the entitlements server in response to determining that the subscriber computing device is connected to the network via the authorized network access device;
the second processor is configured with software executable instructions to cause the entitlements server to perform operations comprising:
using the subscriber identifier to determine a subscription level;
using the subscription level to determine subscriber entitlement to receive the requested content;
using the subscriber entitlement to receive the requested content to generate an authorization message; and
wherein the first processor is further configured with software executable instructions to cause the content server to perform operations comprising;
receiving the authorization message from the entitlements server;
determining whether to provide the requested content to the subscriber computing device in accordance with the first quality-of-service level based on the received authorization message.
11. The system of claim 10 , wherein the authorized network access device is a cable modem.
12. The system of claim 10 , wherein the content is selected from the group consisting of video content, audio content, photographic content, text content, game content, and multi-media content.
13. The system of claim 10 , wherein the subscriber computing device is selected from the group consisting of a desktop computer, a laptop computer, a mobile device, a PDA, and a cell phone.
14. The system of claim 10 , wherein the network is a shared network selected from the group consisting of a shared cable network, a shared hybrid-fiber-coax network, a shared fiber network, a shared satellite network, and a shared IP network.
15. The system of claim 10 , wherein the second processor is configured with software executable instructions to cause the entitlements server to perform operations such that using the subscriber identifier to determine the subscription level and using the subscription level to determine the subscriber entitlement comprises:
identifying from the subscription level one or more channels that the subscriber computing device is entitled to receive from the MVPD server; and
determining whether the entitlement to receive the one or more channels entitles the subscriber computing device to receive the requested content.
16. The system of claim 10 , wherein the subscription level is selected from the group consisting of a list of subscribed channels, a service package descriptor indicative of a subscribed level of service, and a list of subscribed premium services.
17. The system of claim 10 , wherein the first processor is configured with software executable instructions to cause the entitlements server to perform operations further comprising denying the request for the content in response to determining based on the IP address included in the received content access message that the subscriber computing device is not connected to the network via the authorized network access device.
18. The system of claim 10 , wherein the network is selected from the group consisting of a wired network, a wireless network, a public switched network, a packet switched network, a hybrid-fiber coax network, a fiber network, and a satellite network.