Location based access control for content delivery network resources
Mechanisms are provided to allow efficient delivery of content through a content delivery network (CDN) without taxing an origin server while maintaining fine grained location based access control. Requests to a CDN are augmented with quantized and non-quantized versions of location information. A CDN can use quantized location information in a URI to identify and return content if content corresponding to the URI is available in cache. If the content is not available in cache, the CDN can contact an origin server to obtain a result for the request using non-quantized location information. The origin server examines the non-quantized location information to determine whether to respond to the client request with content. The origin server examines the area corresponding to the quantized location information to determine whether the content should be cached at the CDN.
1. A content delivery network server comprising:
a cache system configured to store a plurality of media resources for transmission to client machines, the media resources being received from an origin server via a network;
a network interface configured to receive from a client machine a resource request requesting a designated location-restricted media resource, the resource request including quantized location coordinates and non-quantized location coordinates associated with the client machine;
a processor configured to determine, based on the quantized location coordinates, whether the plurality of media resources stored in the cache system includes the designated location-restricted media resource; and
wherein the quantized location coordinates have fewer significant digits than the non-quantized location coordinates.
2. The content delivery network server recited in claim 1 , wherein the non-quantized location coordinates comprise latitude and longitude coordinates.
3. The content delivery network server recited in claim 2 , wherein the quantized location coordinates comprise latitude and longitude coordinates having fewer significant digits than the non-quantized location coordinates.
4. The content delivery network server recited in claim 1 , wherein quantized location coordinates and the non-quantized location coordinates are different versions of the same coordinates.
5. The content delivery network server recited in claim 1 , wherein the resource request comprises a uniform resource identifier, and wherein the quantized location coordinates are included in a cacheable portion of the uniform resource identifier.
6. The content delivery network server recited in claim 1 , wherein the resource request comprises a uniform resource identifier, and wherein the non-quantized location coordinates are included in query parameters of the uniform resource identifier.
7. The content delivery network server recited in claim 1 , wherein the non-quantized location coordinates are included in a non-cacheable portion of the resource request.
8. The content delivery network server recited in claim 1 , wherein the processor is further configured to determine, based on the quantized location coordinates, whether the client machine has permission access the designated location-restricted media resource when the plurality of media resources stored in the cache system includes the designated location-restricted media resource.
9. The content delivery network server recited in claim 1 , wherein the network interface is further configured to transmit a remote request to the origin server to obtain the designated location-restricted media resource when the plurality of media resources stored in the cache system does not include the designated location-restricted media resource.
10. The content delivery network server recited in claim 9 , wherein the network interface is further configured to receive from the origin server a response including the designated location-restricted media resource and an indication as to whether the designated location-restricted media resource should be stored in the cache.
11. The content delivery network server recited in claim 10 , wherein the response indicates that the designated location-restricted media resource should be cached if a region defined by the quantized location coordinates falls entirely within a non-restricted zone.
12. The content delivery network server recited in claim 10 , wherein the response indicates that the designated location-restricted media resource should not be cached if a region defined by the quantized location coordinates falls partially within a non-restricted zone.
13. The content delivery network server recited in claim 1 , wherein the processor configured to determine to parse the resource request to identify quantized location coordinates.
14. A method comprising:
maintaining in a cache system a plurality of media resources for transmission to client machines, the media resources being received from an origin server via a network;
receiving from a client machine via a network interface a resource request requesting a designated location-restricted media resource,
the resource request including quantized location coordinates and non-quantized location coordinates associated with the client machine;
determining, based on the quantized location coordinates, whether the plurality of media resources stored in the cache system includes the designated location-restricted media resource; and
wherein the quantized location coordinates have fewer significant digits than the non-quantized location coordinates.
15. The method recited in claim 14 , wherein non-quantized location coordinates comprise latitude and longitude coordinates.
16. The method recited in claim 15 , wherein the quantized location coordinates comprise latitude and longitude coordinates having fewer significant digits than the non-quantized location coordinates.
17. The method recited in claim 14 , wherein quantized location coordinates and the non-quantized location coordinates are different versions of the same coordinates.
18. The method recited in claim 14 , wherein the resource request comprises a uniform resource identifier, and wherein the quantized location coordinates are included in a cacheable portion of the uniform resource identifier.
19. The method recited in claim 14 , wherein the resource request comprises a uniform resource identifier, and wherein the non-quantized location coordinates are included in query parameters of the uniform resource identifier.
20. One or more non-transitory computer readable media having instructions stored thereon for performing a method, the method comprising:
maintaining in a cache system a plurality of media resources for transmission to client machines, the media resources being received from an origin server via a network;
receiving from a client machine via a network interface a resource request requesting a designated location-restricted media resource,
the resource request including quantized location coordinates and non-quantized location coordinates associated with the client machine;
determining, based on the quantized location coordinates, whether the plurality of media resources stored in the cache system includes the designated location-restricted media resource; and
wherein the quantized location coordinates have fewer significant digits than the non-quantized location coordinates.