Google Inc.

Haidong Shao

Wei Liu

Ying Ying Liu

Aaron Malenfant

Jiexing Gu

Hongshu Liao

Adrian J Isles

Colin Whittaker

Maxim Kovalkov

John Draper

Vinay Damodar Shet

Jason Fedor

David C Lee

Ying Liu

Edison Tan

David Lee

A method includes receiving, by a content distribution network server, a first request for content, the first request for content comprising an identifier of a location of the content. Playback of the requested content is caused to begin at a client device. A content-based authentication token generated by the client device is received, wherein the content-based authentication token is associated with a second request for content that is initiated by the client device, and the content-based authentication token is sent for verification by a content sharing platform. Responsive to receiving an indication that the content-based authentication token is valid, playback of the requested content is caused to continue at the client device.

Systems and methods to deliver content during client authentication process in a distributed computing system

A method includes receiving, by a processing device of a content sharing platform, a request for desired content from a client device, the content being stored in a content delivery network (CDN). The method further includes generating, based on data available to the content sharing platform, a partial trust metric associated with the client device, wherein the partial trust metric is to be used by a CDN server to make a decision regarding access to the desired content by the client device. The method further includes generating a response to the content request, wherein the response comprises one or more resource locators for accessing the desired content in the CDN, and the partial trust metric. The method further includes sending the response to the client device to enable the client device to request the desired content from the CDN server using the resource locator(s) and the partial trust metric.

Systems and methods to evaluate client device trust in a distributed computing system

A method includes receiving, by a content sharing platform, a request for content from a client device, the request for content comprising a session-based authentication token that pertains to a session between the client device and the content sharing platform. The content sharing platform can further validate the session-based authentication token and cause playback of the requested content to begin at the client device. Responsive to a valid content-based authentication token supplied by the client device, the content sharing platform can cause playback of the requested content to continue at the client device, wherein the valid content-based authentication token is based on an identifier of the requested content.

Systems and methods for screening unauthorized devices are provided. More particularly, a challenge that includes a first set of data can be generated. The challenge can require a browser of a requesting device to perform a browser task with respect to the first set of data to generate a second set of data. The challenge can be provided to the requesting device and a response to the challenge can be received. The response can include the second set of data generated by the browser of the requesting device through performance of the browser task. It can be determined whether the browser of the requesting device is an authorized browser based, at least in part, on the second set of data. Whether or not the requesting device is authorized to access a resource can be based, at least in part, on whether the browser is an authorized browser.

Browser attestation challenge and response system

Systems and methods of verifying a user are provided. In particular, a request to engage in a verification process to gain access to an online resource can be received. The request can be provided by a first user device associated with a user. A validation request associated with a second user device associated with the user can be received. The validation request can include a device profile associated with the second user device. It can then be determined whether to validate the second user device based at least in part on the device profile. When it is determined to validate the second user device, the first user device can be granted access to the online resource.

Controlling access to online resources using device validations

Systems and methods of determining image characteristics are provided. More particularly, a first image having an unknown characteristic can be obtained. The first image can be provided to a plurality of user devices in a verification challenge. The verification challenge can include one or more instructions to be presented to a user of each user device. The instructions being determined based at least in part on the first image. User responses can be received, and an unknown characteristic of the first image can be determined based at least in part on the received responses. Subsequent to determining the unknown characteristic of the first image, one or more machine learning models can be trained based at least in part on the determined characteristic.

Growing community of inventors

Sunnyvale, CA, United States of America

Haidong Shao