Telefonaktiebolaget Lm Ericsson (publ)

Ericsson Ab

Avesha, Inc.

Azuki Systems, Inc.

Raj Nair

Prabhudev Navali

Mikhail Mikhailov

Kevin J Ma

Chin-Cheng Wu

Robert Hickey

Daniel Biagini

Jianguo Xu

IChang Lin

Sudhir Halbhavi

Pablo Argon

David Alexander

Tung Ng

Rob Hickey

Prasad Dorbala

Chris Phillips

Andrew Fiske Roberts

Paul Tweedale

Man Li

Sai Koti Reddy Danda

Eric Peterson

Ichang Lin

A method is provided for managing over-the-top delivery of content through a plurality of content delivery networks (CDN). The method provided works transparently with standard HTTP servers supporting an initial request for content from a client to a first preferred CDN. If the first CDN does not have the content, the method includes provisions for the first CDN to acquire the content from a second CDN, or for the client to request the content from a second CDN directly. A system is also specified for implementing a client and server infrastructure in accordance with the provisions of the method.

Method and system for federated over-the-top content delivery

A distributed computing system has one or more clusters each including compute nodes connected by a cluster network and executing microservices in respective containers organized into pods. The system includes application slice components (routers, slice gateways) distributed among the clusters to define and operate application slices each providing application slice services for respective sets of pods distributed among the clusters. Each slice gateway provides an interface between local pods of the application slice and remote pods of the application slice on a respective different cluster. Each slice is associated with namespaces, network policies and resource quotas for the applications onboarded on the slice. The slice routers and slice gateways for a given application slice form a respective slice-specific overlay network providing cross-cluster network services including service discovery and traffic forwarding with isolation from other application slices that co-reside on the clusters.

Distributed computing system employing application slice overlay networks

A method and device for consuming watermarked media content includes generating a manifest request to access a watermarked media content asset, receiving a custom manifest and a watermarking signature including a unique sequence of segment variants relating to the media content asset, and generating a segment request to an origin server having a plurality of composite segments for the media content asset. The client device receives, from the origin server, a composite segment that includes an authorized watermarked segment variant. Using the unique sequence, the client device extracts the authorized watermarked segment variant and assembles a combination of the main ISOBMFF track and authorized watermarked segment variant to form an output composite segment that is assembled only from the main ISOBMFF track and the extracted particular watermarked segment variant, and decrypts and decodes the output composite segment for rendering by a player application of the client device.

System and method for watermarking of media segments using sample variants for normalized encryption (SVNE)

A networked system for real-time computer-aided augmentation of a live input video stream includes an endpoint system configured and operative to handle the live input video stream and a live augmented video stream and to provide service access to a video augmentation service for the computer-aided augmentation of the live input video stream. The system further includes a backend system providing service orchestration to orchestrate use and operation of the video augmentation service, and an edge inference system coupled to the endpoint system and to the backend system, the edge inference system being configured and co-operative with the endpoint system to provide the video augmentation service on the live input video stream and thereby generate the live augmented video stream, based on the service orchestration by the backend system.

Networked system for real-time computer-aided augmentation of live input video stream

A technique is directed toward controlling placement of workloads of an application within an application environment. The technique involves, while a first placement of workloads of the application is in a first deployment of resources within the application environment, generating a set of resource deployment changes that accommodates a predicted change in demand on the application. The technique further involves adjusting the first deployment of resources within the application environment to form a second deployment of resources within the application environment, the second deployment of resources being different from the first deployment of resources. The technique further involves providing a second placement of workloads of the application in the second deployment of resources to accommodate the predicted change in demand on the application, the second placement of workloads being different from the first placement of workloads.

Controlling placement of workloads of an application within an application environment

A method for enforcing entitlements includes configuring a wide variety of entitlements at a server; determining applicable combination of entitlements for a given client request; sending entitlements to the requesting client securely; handling entitlement information securely on a plurality of client devices at run time; storing entitlement information securely on a plurality of client devices for offline use; and enforcing entitlements on a plurality of client devices. The method employs manipulation of manifest files by a proxy that may be included in the client device or located in the network.

Media distribution system with manifest-based entitlement enforcement

A technique performs load balancing self-adjustment within an application environment. The technique involves, while nodes of the application environment load balance traffic among clusters that provide services for an application in accordance with a first load balancing configuration, sensing application environment metrics. The technique further involves performing a self-adjustment operation that generates a second load balancing configuration based on the application environment metrics, the second load balancing configuration being different from the first load balancing configuration. The technique further involves deploying the second load balancing configuration among the nodes to enable the nodes to load balance the traffic among the clusters that provide the services for the application in accordance with second load balancing configuration in place of the first load balancing configuration.

Performing load balancing self adjustment within an application environment

Techniques manage cluster resources within an application environment. The techniques involve identifying a group of cluster resources from a plurality of cluster resources of the application environment, the plurality of cluster resources being constructed and arranged to provide a plurality of services. The techniques further involve forming an application slice having the group of cluster resources. The techniques further involve deploying the application slice to provide services. Certain techniques provide a platform that allows operators to build application slices (or application overlays) that are a way of grouping application pods (or containers) based on one or more organizing principles such as velocity of deployment, security, governance, etc.

Providing a set of application slices within an application environment

A system and method for distributing watermarked media content assets in which a main track of a media content asset includes a first watermarking payload and at least one variant track includes a second watermarking payload. A plurality of composite segments of the media content asset are generated for distribution, wherein each composite segment includes a portion of the main track and may include a corresponding portion of at least one variant track. The composite segments may be uploaded to a delivery node operative to deliver segments responsive to a unique watermarking signature provided by a client controller operating in conjunction with a watermarking session manager.

A system and method for distributing watermarked media content assets wherein a main track of a media content asset is provided with a first watermarking payload and at least one variant track is provided with a second watermarking payload. A plurality of composite segments of the media content asset are generated for distribution, wherein each composite segment includes a portion of the main track and corresponding portion of at least one variant track. The composite segments may be uploaded to a delivery node operative to deliver segments responsive to a unique watermarking signature provided by a client controller operating in conjunction with a watermarking session manager.

A method for providing privacy during delivery of ABR media content to a plurality of ABR OTT client devices includes receiving, at a network node that includes a Controlled Cache, an ABR manifest for an ABR media asset. The ABR manifest includes a segmentation-units index. Responsive to receiving a request for the ABR media asset from an ABR OTT client device, the method sends to the ABR OTT client device a custom manifest having a number of segmentation-units in segments that is customized for an ABR playback session. A network node, which can be one of an origin server, an edge server and a Just-In-Time Packager (JIT-P), and a computer program product for providing privacy during delivery are also shown.

System, devices and methods for providing stream privacy in an ABR OTT media network

A method and a user device are disclosed for securing streaming content decryption. The method includes receiving at the user device a manifest for requested content, the manifest providing a Content Encryption Key (CEK) that is encrypted using a first public Key Encryption Key (KEK), a corresponding first private KEK being stored in secure storage on the user device; decrypting, inside a secure processing zone on the user device, the CEK using the first private KEK to create a decrypted content key; decrypting, inside the secure processing zone, requested content using the decrypted content key to form decrypted content; and providing the decrypted content to a decoder on the mobile user device.

System and method for securing content keys delivered in manifest files

A method, system and non-transitory computer-readable medium for distributing adaptive bitrate (ABR) media are disclosed. The method includes initially ingesting a first ABR media element at a first network node and receiving, at the first network node, a second ABR media element that was initially ingested at a second node. The method further includes initiating distribution of the first and second ABR media elements from the first network node to a first plurality of network nodes.

Growing community of inventors

Lexington, MA, United States of America

Raj Nair