Token-Based Link Security for Media Stream Access Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Internet video publishers face challenges in controlling publication costs and preventing unauthorized access to video streams, as existing technologies lack effective methods to restrict simultaneous and total viewership, leading to increased bandwidth costs.

Innovation Solution

Implementing token-based link security systems where a webpage includes a link with an embedded security token generated by a web server using a private key and encryption algorithm, which is verified by a media server to grant access only to authorized clients, thereby controlling access and reducing costs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a link to a media stream is published without security restrictions, then viewers can easily access the content, but unauthorized users can also access it leading to increased bandwidth costs

Engineering Contradiction:
Improveease of access to media streamVSAvoidbandwidth cost
Core Design Contradiction:
Ease of operationVSLoss of energy

Solution Approach 1:

A security token acts as an intermediary between the viewer and the media stream. The token is embedded in the link and must be validated by the media server before granting access. This intermediary mechanism allows legitimate viewers to access content while blocking unauthorized users, thereby controlling bandwidth costs without significantly impacting ease of access for authorized users.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Loss of energy

If token-based security is implemented in links, then unauthorized access is prevented and bandwidth costs are reduced, but the link structure becomes more complex

Engineering Contradiction:
Improvebandwidth costVSAvoidlink structure complexity
Core Design Contradiction:
Loss of energyVSDevice complexity

Solution Approach 1:

The security token is generated and embedded in the link in advance, before the user accesses the media stream. This preliminary action of pre-configuring the token in the link structure allows the media server to quickly validate access requests without complex real-time computations, reducing the perceived complexity during actual usage.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If the media server validates security tokens for each access request, then access control is enforced, but processing time increases

Engineering Contradiction:
Improveaccess control enforcementVSAvoidaccess request processing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The security token contains pre-computed validation data that is copied into the link. Instead of performing complex cryptographic validations for each request, the media server can quickly verify the token by comparing it against the pre-configured private key and algorithm, significantly reducing processing time while maintaining reliable access control.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS9047482B2Token-based security for links to media streams
Publication Date: 2015.06.02 WOWZA MEDIA SYSTEMS LLC
  • US9047482B2 patent drawing
  • US9047482B2 patent drawing
  • US9047482B2 patent drawing

AI summary

Systems and methods of token-based protection for links to media streams are disclosed. For example, a computing device may receive a media request in response to selection of a link to a media stream. The link may include a first token that is generated based on a private key and an encryption algorithm, and the media request may include the first token. The computing device may grant or deny the media request based on a comparison of the first token and a second token that is generated based on the private key and the encryption algorithm.