IP Library Granted Patent US 9,980,136
Granted Patent B2
US 9,980,136 · App. 15/335,307 · Granted May 22, 2018

Content access authentication for dynamic adaptive streaming over hypertext transfer protocol

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,980,136
App. No.
15/335,307
Granted
May 22, 2018
Kind
B2
Abstract

A technology that is operable to authenticate content access for dynamic adaptive streaming over hypertext transfer protocol (HTTP) (DASH) is disclosed. In one embodiment, a client device is configured with circuitry to communicate, to a content server, a request for a media presentation description (MPD). An MPD message is received from the content server indicating one or more content authorization elements to access content at the content server. A request for authorization of the client device to access content at the content server is communicated to an authorization server, when the client device is configured to perform the content authorization elements in the MPD message. An authorization message is received from the authorization server. A content request message requesting one or more DASH segments is communicated to the content server.

Claims (44)

1. An apparatus of a client operable to access HTTP DASH (dynamic adaptive streaming over hypertext transfer protocol) content from a content server, the client comprising one or more hardware processors and memory configured to:

signal, by the client, a first message for transmission to the content server, wherein the first message includes a request for a media presentation description (MPD) file from the content server;

decode, at the client, an MPD file received from the content server, wherein the MPD file includes:

a client authentication value for authenticating the client; and

a content access authorization value for authorizing access by the client to selected DASH content from the content server;

execute, at the client, a client authentication protocol indicated by the client authentication value and a content access authorization protocol indicated by the content access authorization value to determine that the client is authorized to access the selected DASH content at the content server and is a trusted client using the MPD file based on a received authorization message; and

signal, at the client, a second message for transmission to the content server, wherein the second message includes a request for the selected DASH content from the content server, when the client is successfully authenticated as an authenticated player and authorized to play back the selected DASH content indicated in the MPD file.

2. The apparatus of claim 1 , further comprising a transceiver configured to:

transmit, to the server, the first message that includes the request for the MPD file;

receive the MPD file from the server; and

transmit, to the server, the second message that includes the request for content from the server.

3. The apparatus of claim 1 , wherein the one or more processors and memory are further configured to decode the content received from the server for playback at the client.

4. The apparatus of claim 1 , wherein the client authentication value indicates the client authentication protocol that is supported at the server.

5. The apparatus of claim 1 , wherein the content access authorization value indicates the content access authorization protocol that is supported at the server.

6. The apparatus of claim 1 , wherein the content accessed from the server includes dynamic adaptive streaming over hypertext transfer protocol (HTTP) (DASH) content.

7. The apparatus of claim 1 , wherein the MPD file includes one or more descriptors that include the client authentication value and the content access authorization value.

8. The apparatus of claim 1 , wherein the client includes an antenna, a touch sensitive display screen, a speaker, a microphone, a graphics processor, an application processor, an internal memory, or a non-volatile memory port.

9. An apparatus of a content server operable to provide access to dynamic adaptive streaming over hypertext transfer protocol (HTTP) (DASH) content, the content server comprising one or more hardware processors and memory configured to:

decode, by the hardware processor at the content server, a request for a media presentation description (MPD) file received from a client;

signal, at the content server, an MPD file for transmission to the client, wherein the MPD file indicates a client authentication value and a content access authorization value for authorizing access by the client to selected DASH content from the content server;

decode, at the content server, a content request message received from the client, wherein the content request message indicates a request for the selected DASH content; and

signal, at the server, the selected DASH content for transmission to the client when the client is successfully authenticated as an authenticated player and authorized to play back the selected DASH content indicated in the MPD file, wherein the client is configured to execute a client authentication protocol indicated by the client authentication value and a content access authorization protocol indicated by the content access authorization value to determine that the client is authorized to access the selected DASH content at the content server and is a trusted client using the MPD file based on a received authorization message.

10. The apparatus of claim 9 , wherein the content request message includes a token indicating an authentication level and an authorization level of the client.

11. The apparatus of claim 9 , wherein the one or more processors and memory are further configured to restrict or deny access by the client to the DASH content at the server when the client is not configured to execute the client authentication protocol indicated by the client authentication value and the content access authorization protocol indicated by the content access authorization value.

12. The apparatus of claim 9 , wherein:

the MPD file includes client authentication protocol information for initiating a client authentication procedure; and

the MPD file includes content access authorization protocol information for initiating a content access authorization procedure.

13. The apparatus of claim 12 , wherein the client authentication protocol information and the content access authorization protocol information include a uniform resource name (URN) associated with the client authentication procedure and the content access authorization procedure.

14. The apparatus of claim 9 , wherein the client authentication value and the content access authorization value are included in one or more descriptors in the MPD file, and the one or more descriptors are declared at a MPD hierarchy level of a common adaptation set, representation attributes and elements, or a sub-representation attributes and elements.

15. The apparatus of claim 9 , wherein the one or more processors and memory are further configured to provide the client with access to the DASH content using:

an Open Authentication Technical Committee (OATC) Online Multimedia Authorization Protocol (OMAP);

an Open Standard for Authorization (OAuth) 2 . 0 ;

an Organization for the Advancement of Structured Information Standards (OASIS) Security Assertion Markup Language (SAML);

a Third Generation Partnership Project (3GPP) Generic Authentication Architecture (GAA); or

a 3GPP Generic Bootstrapping Architecture (GBA).

16. At least one machine non-transitory readable storage medium having instructions embodied thereon for accessing dynamic adaptive streaming over hypertext transfer protocol (HTTP) (DASH) content from a content server, the instructions when executed perform the following:

signaling, using one or more hardware processors at a client, a first message for transmission to the content server, wherein the first message includes a request for a media presentation description (MPD) file from the content server;

decoding, using the one or more hardware processors at the client, the MPD file received from the content server, wherein the MPD file indicates a client authentication value and a content access authorization value for authorizing access by the client to selected DASH content from the content server;

executing, using the one or more hardware processors at the client, a client authentication protocol indicated by the client authentication value and a content access authorization protocol indicated by the content access authorization value to determine that the client is authorized to access the selected DASH content at the content server and is a trusted client using the MPD file based on a received authorization message; and

signaling, using the one or more hardware processors at the client, a second message for transmission to the content server, wherein the second message includes a request to access the selected DASH content from the content server, when the client is successfully authenticated as an authenticated player and authorized to play back the selected DASH content indicated in the MPD file.

17. The at least one machine readable storage medium of claim 16 , further comprising instructions when executed perform the following: decoding the DASH content received from the server for playback at the client.

18. The at least one machine readable storage medium of claim 16 , wherein the client authentication value indicates the client authentication protocol that is supported at the server.

19. The at least one machine readable storage medium of claim 16 , wherein the content access authorization value indicates the content access authorization protocol that is supported at the server.

20. The at least one machine readable storage medium of claim 16 , wherein the MPD file includes one or more descriptors that include the client authentication value and the content access authorization value.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 26, 2020
From: INTEL CORPORATION
To: APPLE INC.
Reel/Frame 053063/0205 →
CONFIRMATORY ASSIGNMENT Recorded Jun 25, 2020
From: INTEL IP CORPORATION
To: INTEL CORPORATION
Reel/Frame 053051/0016 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 19, 2017
From: OYMAN, OZGUR
To: INTEL IP CORPORATION
Reel/Frame 042442/0649 →