Methods of controlling access to network content referenced within structured documents
Methods, apparatuses and systems directed to methods of controlling access to one or more items of network content referenced within a structured document such as an RSS feed. Embodiments of the invention are particularly suited to podcasting, where the access control is based on monetary payment, presentation of coupons or other promotional devices, or other forms of web commerce; or may limit the duration of accessibility of the content, the number of times it can be downloaded, or other characteristics of access.
1. A method of controlling access to network content, comprising steps of:
receiving a unique token at a first server as part of a request from a client device;
validating the unique token against an access control, the unique token identifying a structured document comprising syndicated network content;
generating a one-time token enabling one-time use access to the structured document in response to the unique token being validated;
forming a redirect uniform resource locator (URL) identifying a location for the structured document and containing the one-time token;
redirecting the request to a second server along with the generated one-time token;
authenticating that the one-time token is valid at the second server; and
delivering the structured document to the client device when the one-time token is authenticated as valid.
2. The method of claim 1 further comprising a step of sending the redirect URL to a client device that requested validation of the unique token.
3. The method of claim 1 further comprising a step of:
generating a uniform resource locator (URL) for information other than the structured document when the unique token for the structured document is invalid.
4. The method of claim 1 wherein the generating step is performed by an intermediary server other than a server operated by the seller of the syndicated network content.
5. The method of claim 1 wherein the structured document is a really simple syndication (RSS) formatted file.
6. The method of claim 1 wherein the validating step comprises checking the unique token against an access control based on payment.
7. The method of claim 1 wherein the generating step comprises generating the one-time token by a one-way hash function on arguments comprising:
a randomly generated seed;
a uniform resource locator (URL);
a shared secret string; and
a time window.
8. An apparatus operable on a server with a processor and a memory for providing control of access to network content, comprising:
a validator containing program code which when executed by the processor in the server causes the server to perform operations of receiving a unique token at a first server as part of a request from a client device via a network and validating the unique token received against an access control utilizing a database containing tokens stored on the server, the unique token identifying a structured document containing syndicated network content; and
a generator containing program code which when executed by the processor in the server causes the server to perform operations of generating a one-time token enabling one-time use access to the structured document in response to the unique token being validated, forming a redirect uniform resource locator (URL) identifying a location for the structured document and containing the one-time token, and redirecting the request to a second server along with the generated one-time token,
wherein the second server comprises program code which when executed by the processor in the second server causes the second server to perform operations of authenticating that the one-time token is valid and deliver the structured document to the client device when the one-time token is authenticated as valid.
9. The apparatus of claim 8 wherein the generator comprises program code which when executed by the processor in the first server causes the first server to perform operations of sending the redirect URL to a client device that requested validation of the unique token.
10. The apparatus of claim 8 wherein the generator comprises program code which when executed by the processor in the server causes the server to perform operations of generating a uniform resource locator (URL) for information other than the structured document when the unique token for the structured document is invalid.
11. The apparatus of claim 8 wherein the apparatus comprises an intermediary server other than a server operated by the seller of the syndicated network content.
12. The apparatus of claim 8 wherein the structured document is a really simple syndication (RSS) formatted file.
13. The apparatus of claim 8 wherein the validator comprises program code which when executed by the processor in the server causes the server to perform operations of checking the unique token against an access control based on payment information.
14. The apparatus of claim 8 wherein the generator comprises program code which when executed by the processor in the server causes the server to perform operations of generating the one-time token with a one-way hash function on arguments comprising:
a randomly generated seed;
a uniform resource locator (URL);
a shared secret string; and
a time window.
15. An apparatus operable on a server with a processor and a memory for providing control of access to network content, comprising:
a validator containing program code which when executed by the processor in the server causes the server to perform operations of validating a unique token received from a client device via a network against an access control utilizing a database containing tokens stored on the server, the unique token identifying a structured document comprising syndicated network; and
a generator containing program code which when executed by the processor in the server causes the server to perform operations of generating a one-time token enabling one-time use access to the structured document in response to the unique token being validated, forming a redirect uniform resource locator (URL) identifying a location for the structured document and containing the one-time token, and sending on the network from the server to a second server the one-time token which has replaced the unique token and enables one-time use access to the structured document,
wherein the second server authenticates that the one-time token is valid and delivers the structured document to the client device when the one-time token is authenticated as valid.
16. The apparatus of claim 15 wherein the apparatus comprises an intermediary server other than a server operated by the seller of the syndicated network content.