Three-Server Content Authorization via Dual Signed Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current content distribution methods lack sophistication and security, particularly as more entities enter the online content delivery landscape, necessitating advanced authorization techniques to manage access and preserve revenue streams.
Innovation Solution
A three-server architecture is implemented, comprising a content management server, a delivery server, and an authorization server, utilizing tokens signed by each server to validate and authorize content access, ensuring secure and controlled distribution of informational content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single server handles both content delivery and authorization, then device complexity is reduced, but security and control capabilities deteriorate
Solution Approach 1:
The patent divides the content distribution system into three separate server entities: a content management server for content intake and distribution management, a delivery server for content storage and delivery, and an authorization server for access control. This segmentation allows each server to specialize in its function while maintaining secure multi-party authorization through token-based validation, resolving the contradiction between system complexity and security.
Solution Approach 2:
The patent introduces tokens as intermediary credentials that mediate authorization between the authorization server, content management server, and delivery server. These tokens contain verified associations and unique identifiers that enable secure communication and validation without requiring direct trust relationships between all servers, thus enhancing security while managing complexity.
2Adaptability or versatility
If multiple distribution entities are added to expand content availability, then adaptability improves, but security control deteriorates
Solution Approach 1:
The patent creates a universal authorization framework where the authorization server can serve multiple distribution entities through a common token validation mechanism. The tokens contain verified associations that work across different content management servers and delivery servers, allowing the system to accommodate multiple distribution entities while maintaining consistent security controls through the standardized token-based authorization process.
Data Source
AI summary
A secure content delivery or access method may include coordination among three devices such as servers—a content management server, a delivery server, and an authorization server. A request for content may originate from an authorization server application, and may involve the application obtaining two digitally signed tokens for the request. The first token may be from the authorization server, and may include a content management server identifier for the requested content. The second token may include two identifiers for the content: the first identifier being the content management server identifier, and the second being a delivery server identifier. The first and second tokens may be signed by the authorization server and content management server, respectively, and may be delivered to the delivery server for validation. Successful validation may result in the delivery server providing a content decryption key for the requested content to a device requesting the content.