DRM Service Instance Migration for Content Distribution Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing content distribution systems face complexity and inefficiency in restricting media asset distribution to specific geographies and devices with required security capabilities, burdening origin servers and CDNs with authorization checks and integration complexities.
Innovation Solution
A system and method that groups media program assets by required security capabilities, assigns distribution range values, and hierarchically migrates authorized asset groups across DRM service instances, allowing only authorized devices to access specific content, thereby simplifying management and eliminating the need for device location-based authorization checks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authorization checks are performed by origin servers or CDNs based on device location, then content distribution control is achieved, but system complexity and operational burden increase
Solution Approach 1:
The patent extracts the authorization check function from origin servers and CDNs by introducing location certificates that are verified by DRM service instances. This separates the authorization logic from the content delivery infrastructure, reducing the complexity burden on origin servers and CDNs while maintaining reliable geographic control.
Solution Approach 2:
The patent introduces location certificates as an intermediary mechanism between device location and content authorization. Instead of direct location-based authorization checks, the system uses location certificates that embed geographic information, allowing verification without direct integration between origin servers and location services.
2Productivity
If third-party CDNs are used for content delivery, then content distribution efficiency is improved, but integration complexity and organizational boundary management increase
Solution Approach 1:
The patent creates a universal authorization mechanism using location certificates that works across any CDN infrastructure. The DRM service instances can verify location certificates regardless of which CDN is used, making the authorization system CDN-agnostic and eliminating the need for complex integrations with third-party CDN authorization systems.
3Reliability
If origin servers perform location-based authorization, then access control is achieved, but origin server operational burden increases
Solution Approach 1:
The patent extracts the location verification operation from origin servers by implementing it in DRM service instances through location certificate validation. Origin servers only need to deliver content to DRM service instances that have already verified device location, significantly reducing their operational burden while maintaining access control.
4Reliability
If devices connect to CDN nodes in their geographical region, then regional content restriction is achieved, but CDN management complexity increases
Solution Approach 1:
The patent introduces location certificates as an intermediary that carries geographic authorization information. Instead of complex CDN node configuration for regional restriction, the system uses location certificates that devices present to DRM service instances, which then determine whether content delivery is authorized based on the certificate's geographic information.
Data Source
AI summary
A content distribution system that groups assets sharing the same required security capabilities in digital rights management service instances. Assets are encrypted with the help of media keys, effectively grouping media keys sharing the same required security capabilities. Digital rights management service instances are organized to cover different geographical areas, and asset groups are configured to migrate according to a configurable distribution range.