Google Inc.

Colin Whittaker

Adrian J Isles

Haidong Shao

Maxim Kovalkov

John Draper

David Lee

David C Lee

A method includes receiving, by a content distribution network server, a first request for content, the first request for content comprising an identifier of a location of the content. Playback of the requested content is caused to begin at a client device. A content-based authentication token generated by the client device is received, wherein the content-based authentication token is associated with a second request for content that is initiated by the client device, and the content-based authentication token is sent for verification by a content sharing platform. Responsive to receiving an indication that the content-based authentication token is valid, playback of the requested content is caused to continue at the client device.

Systems and methods to deliver content during client authentication process in a distributed computing system

A method includes receiving, by a processing device of a content sharing platform, a request for desired content from a client device, the content being stored in a content delivery network (CDN). The method further includes generating, based on data available to the content sharing platform, a partial trust metric associated with the client device, wherein the partial trust metric is to be used by a CDN server to make a decision regarding access to the desired content by the client device. The method further includes generating a response to the content request, wherein the response comprises one or more resource locators for accessing the desired content in the CDN, and the partial trust metric. The method further includes sending the response to the client device to enable the client device to request the desired content from the CDN server using the resource locator(s) and the partial trust metric.

Systems and methods to evaluate client device trust in a distributed computing system

A first request for content from a client device is received. The first request includes a resource locator provided by an authorizing data service to authorize the client device to obtain the requested content. The resource locator includes a first digital signature associated with authorization of the client device to access the requested content, and a second digital signature associated with authorization of delivery of the requested content for access by the client device. An occurrence of an event is identified that indicates a change in the delivery of the requested content to the client device. A third digital signature associated with a changed delivery of the requested content is generated. A new resource locator is provided to the client device that includes the first digital signature and the third digital signature.

Separating the authorization of content access and content delivery using multiple cryptographic digital signatures

A method includes receiving, by a content sharing platform, a request for content from a client device, the request for content comprising a session-based authentication token that pertains to a session between the client device and the content sharing platform. The content sharing platform can further validate the session-based authentication token and cause playback of the requested content to begin at the client device. Responsive to a valid content-based authentication token supplied by the client device, the content sharing platform can cause playback of the requested content to continue at the client device, wherein the valid content-based authentication token is based on an identifier of the requested content.

Growing community of inventors

Newton, MA, United States of America

Colin Whittaker