Content Descriptor Modification for Token-Auth Encrypted Data Delivery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems lack the logic to manage the flow of tokens needed to retrieve decryption keys for encrypted data, hindering the delivery of token-authenticated content across platforms.
Innovation Solution
Modifying top-level content descriptors to include a reference to a key service endpoint and embedding a token as a parameter, allowing players to access decryption keys on behalf of users, thereby facilitating decryption of encrypted data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If existing systems are used to deliver encrypted data, then data security is maintained, but the systems lack the logic to manage token flow for retrieving decryption keys, hindering cross-platform delivery
Solution Approach 1:
The patent introduces a key service as an intermediary component that mediates between the content delivery system and the token management logic. The key service receives tokens from players, validates them, and returns decryption keys without requiring the player to implement complex token management logic. This resolves the contradiction by enabling cross-platform delivery (improving adaptability) while centralizing token management complexity in the key service (managing device complexity).
Solution Approach 2:
The system is segmented into distinct functional components: content delivery, key service, and player. The token management functionality is separated from the player and consolidated in the key service. This segmentation allows the player to remain simple while still enabling cross-platform encrypted content delivery through the specialized key service component.
2Ease of operation
If content descriptors are modified to include key service references and embedded tokens, then players can retrieve decryption keys facilitating decryption, but the content descriptor structure becomes more complex
Solution Approach 1:
The token is embedded in the content descriptor in advance, before the player needs to retrieve the decryption key. This preliminary embedding of the token eliminates the need for the player to manually construct or manage token flow, simplifying the player's operation. The content descriptor structure does become more complex, but this is acceptable as the complexity is in the data structure rather than the operational logic.
3Reliability
If encryption is applied to protect data during transit and limit access, then data security is improved, but authorization mechanisms are needed to manage access rules
Solution Approach 1:
The key service acts as an intermediary that handles the authorization mechanism complexity. Instead of implementing complex authorization logic in each player or content delivery system, the key service centralizes token validation and decryption key distribution. This maintains strong data security through encryption while managing authorization complexity in a centralized, reusable component.
Data Source
AI summary
Described herein are various technologies pertaining to delivery of token-authenticated encrypted data. Content descriptor(s) (e.g., playlist(s)) can be modified to facilitate exchange of a token for a decryption key for browser(s) that do not provide logic to manage a flow of the token.