Automatic token-based secure content streaming method and apparatus
Disclosed are systems and methods for improving interactions with and between computers in secure content access, distribution and download and/or providing systems supported by or configured with personal computing devices, servers and/or platforms. The systems interact to identify and retrieve data within or across platforms, which can be used to improve the quality of data used in processing interactions between or among processors in such systems. The disclosed systems and methods provide systems and methods for automatic token-based secure content streaming.
1. A method comprising:
receiving, at a computing device and over an electronic communications network, a first request, from a user device, for a content item, a first network address being associated with the first request;
generating, via the computing device, a secure token, the generating comprising encrypting information including the first network address and temporal information to form the secure token;
transmitting, via the computing device and over the electronic communications network to the user device, the secure token in response to the first request for the content item;
receiving, via the computing device and over the electronic communications network, a subsequent request for the content item, from the user device, after the first request for the content item, a subsequent network address being associated with the subsequent request;
obtaining, via the computing device, the secure token associated with the subsequent request;
extracting, via the computing device, the first network address and the temporal information from the secure token associated with the subsequent request;
making, via the computing device, a determination whether or not to permit the subsequent request for the content item, making the determination comprising:
determining, using the temporal information extracted from the secure token associated with the subsequent request, whether or not the secure token has expired;
determining that the subsequent network address does not match the first network address; and
in response to determining that the subsequent network address does not match the first network address, determining, using the subsequent network address associated with the subsequent request for the content item, whether or not a count of network addresses associated with each request for the content item by the user device exceeds a threshold number of network addresses;
permitting, via the computing device, the subsequent request for the content item in a case that the secure token has not expired and the threshold number of network addresses is not exceeded; and
denying, via the computing device, the subsequent request for the content item in a case that the secure token is expired and in a case that the threshold number of network addresses is exceeded.
2. The method of claim 1 , the obtaining further comprising retrieving the secure token from the subsequent request.
3. The method of claim 1 , the obtaining further comprising retrieving the secure token from a data store at the user device.
4. The method of claim 1 , further comprising:
in response to receiving the first request:
storing, via the computing device, the first network address in a network address data store; and
setting, via the computing device, the count of network addresses to one.
5. The method of claim 4 , further comprising:
incrementing, via the computing device, the count of network addresses by one in response to determining that the subsequent network address does not match the first network address.
6. The method of claim 1 , the temporal information comprising information indicating an expiration for the secure token.
7. The method of claim 1 , the secure token is transmitted in response to the first request in a URL including a reference to the content item requested in the first request.
8. The method of claim 7 , the URL further comprising the temporal information, a hash of the first network address and a URL signature.
9. The method of claim 7 , the URL signature being generated using the temporal information and the hash of the first network address.
10. The method of claim 1 , the secure token is transmitted in response to the first request in a cookie for storage at the user device.
11. The method of claim 10 , the cookie comprising the temporal information and a hash of the first network and the address secure token.
12. A non-transitory computer-readable storage medium tangibly encoded with computer-executable instructions that when executed by a processor associated with a computing device perform a method comprising:
receiving, over an electronic communications network, a first request, from a user device, for a content item, a first network address being associated with the first request;
generating a secure token, the generating comprising encrypting information including the first network address and temporal information to form the secure token;
transmitting, over the electronic communications network to the user device, the secure token in response to the first request for the content item;
receiving, over the electronic communications network, a subsequent request for the content item, from the user device, after the first request for the content item, a subsequent network address being associated with the subsequent request;
obtaining the secure token associated with the subsequent request;
extracting the first network address and the temporal information from the secure token associated with the subsequent request;
making a determination whether or not to permit the subsequent request for the content item, making the determination comprising:
determining, using the temporal information extracted from the secure token associated with the subsequent request, whether or not the secure token has expired;
determining that the subsequent network address does not match the first network address; and
in response to determining that the subsequent network address does not match the first network address, determining, using the subsequent network address associated with the subsequent request for the content item, whether or not a count of network addresses associated with each request for the content item by the user device exceeds a threshold number of network addresses;
permitting the subsequent request for the content item in a case that the secure token has not expired and the threshold number of network addresses is not exceeded; and
denying the subsequent request for the content item in a case that the secure token is expired and in a case that the threshold number of network addresses is exceeded.
13. The non-transitory computer-readable storage medium of claim 12 , the obtaining further comprising retrieving the secure token from the subsequent request.
14. The non-transitory computer-readable storage medium of claim 12 , the obtaining further comprising retrieving the secure token from a data store at the user device.
15. The non-transitory computer-readable storage medium of claim 12 , further comprising:
in response to receiving the first request:
storing, via the computing device, the first network address in a network address data store; and
setting, via the computing device, the count of network addresses to one.
16. The non-transitory computer-readable storage medium of claim 15 , further comprising:
incrementing, via the computing device, the count of network addresses by one in response to determining that the subsequent network address does not match the first network address.
17. The non-transitory computer-readable storage medium of claim 12 , the temporal information comprising information indicating an expiration for the secure token.
18. The non-transitory computer-readable storage medium of claim 12 , the secure token is transmitted in response to the first request in a URL including a reference to the content item requested in the first request.
19. The non-transitory computer-readable storage medium of claim 18 , the URL further comprising the temporal information, a hash of the first network address and a URL signature.
20. A computing device comprising:
a processor;
a non-transitory storage medium for tangibly storing thereon program logic for execution by the processor, the program logic comprising:
receiving logic executed by the processor for receiving, over an electronic communications network, a first request, from a user device, for a content item, a first network address being associated with the first request;
generating logic executed by the processor for generating a secure token, the generating comprising encrypting information including the first network address and temporal information to form the secure token;
transmitting logic executed by the processor for transmitting, over the electronic communications network to the user device, the secure token in response to the first request for the content item;
receiving logic executed by the processor for receiving, over the electronic communications network, a subsequent request for the content item, from the user device, after the first request for the content item, a subsequent network address being associated with the subsequent request;
obtaining logic executed by the processor for obtaining the secure token associated with the subsequent request;
extracting logic executed by the processor for extracting the first network address and the temporal information from the secure token associated with the subsequent request;
making logic executed by the processor for making a determination whether or not to permit the subsequent request for the content item, the logic for making the determination comprising:
determining logic executed by the processor for determining, using the temporal information extracted from the secure token associated with the subsequent request, whether or not the secure token has expired;
determining logic executed by the processor for determining that the subsequent network address does not match the first network address; and
determining logic executed by the processor for determining, in response to determining that the subsequent network address does not match the first network address and using the subsequent network address associated with the subsequent request for the content item, whether or not a count of network addresses associated with each request for the content item by the user device exceeds a threshold number of network addresses;
permitting logic executed by the processor for permitting the subsequent request for the content item in a case that the secure token has not expired and the threshold number of network addresses is not exceeded; and
denying logic executed by the processor for denying the subsequent request for the content item in a case that the secure token is expired and in a case that the threshold number of network addresses is exceeded.