Network-Based Media Processing Authentication Descriptors
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Network-based media processing systems face threats from authentication and authorization vulnerabilities due to the separation of media sinks and sources by newly established entities, which can expose media use to various Internet threats.
Innovation Solution
A method and system for network-based media processing that includes generating a workflow description with an authentication and authorization descriptor, defining desired authentication methods, and using a workflow manager to authenticate and authorize media sources, ensuring secure media processing through integrity verification and session-specific operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If media processing is separated into multiple entities (media source, MPEs, media sink) in a network-based system, then media processing flexibility and scalability are improved, but authentication and authorization security deteriorate due to exposure to Internet threats
Solution Approach 1:
The patent introduces an authentication and authorization descriptor as an intermediary component that mediates between the media source and workflow manager. This descriptor contains authentication methods, authorization information, and security parameters that enable secure communication across the distributed media processing entities without compromising the network-based flexible architecture.
Solution Approach 2:
The patent implements preliminary authentication and authorization actions by embedding the authentication and authorization descriptor in the workflow description before media processing begins. This allows security credentials and authentication methods to be established in advance, ensuring that when media data flows through multiple entities, the authentication framework is already in place to protect against Internet threats.
2Adaptability or versatility
If multiple authentication methods are supported to provide flexibility, then authentication versatility is improved, but system complexity increases
Solution Approach 1:
The patent implements dynamic authentication method selection by including a preference order for authentication methods in the authentication and authorization descriptor. The workflow manager can dynamically choose the most appropriate authentication method based on the descriptor's preferences, the capabilities of the media source, and the security requirements of the specific workflow, rather than requiring support for all possible authentication methods simultaneously.
Solution Approach 2:
The patent uses parameter changes to manage authentication complexity by encoding authentication method preferences, security requirements, and authorization levels as parameters within the authentication and authorization descriptor. This allows the system to adapt authentication behavior through parameter configuration rather than through complex structural changes, enabling multiple authentication methods to be supported through a unified parameter-driven framework.
Data Source
AI summary
A method and a network-based media processing source, including: generating a workflow description; generating, for a workflow manager, a container file or a manifest or a bit stream, which container file or manifest or bit stream comprises the workflow description; and including in the workflow description an authentication and authorization descriptor that defines desired authentication methods desired by the network-based media processing source for subsequent authenticating a media source to the workflow manager. The workflow manager performs: receiving from a network-based media processing source a workflow description; and determining, from the container file or a manifest or a bit stream, a workflow description that comprises an authentication and authorization descriptor that indicates desired authentication methods authenticating a media source to the workflow manager.