Computing system with device attestation feature
In one aspect, an example method includes (i) encountering, by a media player of a media presentation system, a trigger to transmit a network communication to a computing device; (ii) generating, by the media player, an attestation watermark indicative of an authenticity of the media player using a cryptographic key; (iii) attaching, by the media player, the attestation watermark to the network communication; and (iv) based on encountering the trigger, transmitting, by the media player, the network communication having the attached attestation watermark to the computing device, the authenticity of the media player being verifiable by the computing device using the attestation watermark.
1. A method comprising:
encountering, by a media player of a media presentation system, a trigger to transmit an advertisement request to a computing device associated with a media provider;
responsive to encountering the trigger to transmit the advertisement request and before a transmission of the advertisement request to the computing device, generating, by the media player, an attestation watermark indicative of an authenticity of the media player using a cryptographic key, wherein the cryptographic key is stored by the media player, and wherein generating the attestation watermark comprises: (i) generating a data object specifying a claim related to the media player, wherein the specified claim comprises a timestamp indicative of an expiration time of the attestation watermark; and (ii) cryptographically signing the data object using the cryptographic key, and wherein the specified claim comprises a device identifier of the media player;
attaching, by the media player, the attestation watermark to the advertisement request; and
based on encountering the trigger, transmitting, by the media player, the advertisement request having the attached attestation watermark to the computing device, wherein the authenticity of the media player is verifiable by the computing device using the attestation watermark.
2. The method of claim 1 , wherein the specified claim comprises a timestamp indicative of a creation time of the attestation watermark.
3. The method of claim 1 , wherein generating the attestation watermark comprises generating a JavaScript Object Notation (JSON) Web Token (JWT) including the specified claim using the cryptographic key.
4. The method of claim 3 , wherein a signature of the JWT is verifiable by the computing device using a public key.
5. The method of claim 4 , wherein:
the public key is hosted on a server, and
the JWT identifies the public key.
6. The method of claim 1 , wherein the computing device associated with the media provider is a media server.
7. The method of claim 1 , wherein
the computing device associated with the media provider is a computing device of an advertisement publisher.
8. The method of claim 1 , wherein generating the attestation watermark comprises:
sending, by the media player, an attestation request to a server that stores the cryptographic key; and
receiving, by the media player from the server, the attestation watermark.
9. A non-transitory computer-readable medium having stored thereon program instructions that upon execution by a processor, cause performance of a set of acts comprising:
encountering a trigger to transmit an advertisement request from a media player of a media presentation system to a computing device associated with a media provider;
responsive to encountering the trigger to transmit the advertisement request and before a transmission of the advertisement request to the computing device, generating an attestation watermark indicative of an authenticity of the media player using a cryptographic key, wherein the cryptographic key is stored by the media player, and wherein generating the attestation watermark comprises: (i) generating a data object specifying a claim related to the media player, wherein the specified claim comprises a timestamp indicative of an expiration time of the attestation watermark; and (ii) cryptographically signing the data object using the cryptographic key, and wherein the specified claim comprises a device identifier of the media player;
attaching the attestation watermark to the advertisement request; and
based on encountering the trigger, transmitting the advertisement request having the attached attestation watermark to the computing device, wherein the authenticity of the media player is verifiable by the computing device using the attestation watermark.
10. A media player configured for performing a set of acts comprising:
encountering a trigger to transmit an advertisement request to a computing device associated with a media provider;
responsive to encountering the trigger to transmit the advertisement request and before a transmission of the advertisement request to the computing device, generating an attestation watermark indicative of an authenticity of the media player using a cryptographic key, wherein the cryptographic key is stored by the media player, and wherein generating the attestation watermark comprises: (i) generating a data object specifying a claim related to the media player, wherein the specified claim comprises a timestamp indicative of an expiration time of the attestation watermark; and (ii) cryptographically signing the data object using the cryptographic key, and wherein the specified claim comprises a device identifier of the media player;
attaching the attestation watermark to the advertisement request; and
based on encountering the trigger, transmitting the advertisement request having the attached attestation watermark to the computing device, wherein the authenticity of the media player is verifiable by the computing device using the attestation watermark.
11. The media player of claim 10 , wherein generating the attestation watermark comprises generating a JavaScript Object Notation (JSON) Web Token including the specified claim using the cryptographic key.
12. The media player of claim 11 , wherein a signature of the JWT is verifiable by the computing device using a public key.
13. The media player of claim 12 , wherein:
the public key is hosted on a server, and
the JWT identifies the public key.
14. The media player of claim 10 , wherein the computing device associated with the media provider is a media server.
15. The media player of claim 10 , wherein the computing device associated with the media provider is a computing device of an advertisement publisher.
16. The media player of claim 10 , wherein generating the attestation watermark comprises:
sending, by the media player, an attestation request to a server that stores the cryptographic key; and
receiving, by the media player from the server, the attestation watermark.