Systems and methods to evaluate client device trust in a distributed computing system
A method includes receiving, by a processing device of a content sharing platform, a request for desired content from a client device, the content being stored in a content delivery network (CDN). The method further includes generating, based on data available to the content sharing platform, a partial trust metric associated with the client device, wherein the partial trust metric is to be used by a CDN server to make a decision regarding access to the desired content by the client device. The method further includes generating a response to the content request, wherein the response comprises one or more resource locators for accessing the desired content in the CDN, and the partial trust metric. The method further includes sending the response to the client device to enable the client device to request the desired content from the CDN server using the resource locator(s) and the partial trust metric.
1. A method, comprising:
receiving, by a processing device of a content sharing platform, a request for desired content from a client device, the content being stored in a content delivery network (CDN);
generating, based on data available to the content sharing platform, a partial trust metric associated with the client device, wherein the partial trust metric and one or more CDN determined factors are to be used by a CDN server to generate a final trust metric to be compared to a threshold criterion to make a decision regarding access to the desired content by the client device;
generating a response to the content request, wherein the response comprises one or more resource locators for accessing the desired content in the CDN, and the partial trust metric; and
sending the response to the client device to enable the client device to request the desired content from the CDN server using the one or more resource locators and the partial trust metric.
2. The method of claim 1 , wherein the data available to the content sharing platform comprises one or more of a plurality of characteristics comprising a watch history of a user associated with the client device, whether the user previously viewed the desired content, whether the client device previously decrypted other content successfully, whether the user is logged-in, whether the user has engaged or been suspected of engaging in an unauthorized activity, an internet protocol (IP) address of the client device, or an encryption log associated with the client device.
3. The method of claim 1 , wherein the partial trust metric is generated using heuristic rules.
4. The method of claim 1 , wherein the partial trust metric is generated using a machine learning model.
5. The method of claim 1 , wherein the response comprising the one or more resource locators and the partial trust metric is digitally signed using one or more signed parameters that provide at least one of an expiration time for the one or more resource locators and/or the partial trust metric, a bit rate for delivering the desired content, or an identifier of a playback event created for the request for the desired content.
6. The method of claim 1 , further comprising:
rejecting the content request based on the partial trust metric.
7. The method of claim 1 , wherein the partial trust metric is to be used by the CDN server to determine whether to release the desired content to the client device or downgrade a quality of the desired content.
8. The method of claim 2 , wherein the plurality of characteristics used to generate the partial trust metric are not available to the CDN server, and wherein the partial trust metric but not any of the plurality of characteristics are provided to the CDN server when the client device requests the desired content.
9. The method of claim 1 , wherein the partial trust metric is to be combined, by the CDN server, with one or more additional factors to determine whether to release the desired content to the client device or downgrade a quality of the desired content, wherein the one or more additional factors are identified by the CDN server based on data available to the CDN server.
10. The method of claim 9 , wherein the additional factors comprise at least one of an IP address used by the client device to request the content from the CDN server, one or more cookies provided to the CDN server with the content request, a client agent reported by the client device to the CDN server, a type of the requested content, a bitrate of the requested content, or an amount of content requested in the content request.
11. A non-transitory computer-readable medium comprising instructions that, responsive to execution by a processing device, cause the processing device to perform operations comprising:
receiving a request for desired content from a client device, the content being stored in a content delivery network (CDN);
generating, based on data available to the content sharing platform, a partial trust metric associated with the client device, wherein the partial trust metric and one or more CDN determined factors are to be used by a CDN server to generate a final trust metric to be compared to a threshold criterion to make a decision regarding access to the desired content by the client device;
generating a response to the content request, wherein the response comprises one or more resource locators for accessing the desired content in the CDN, and the partial trust metric; and
sending the response to the client device to enable the client device to request the desired content from the CDN server using the one or more resource locators and the partial trust metric.