Method for Scalable Access Control Decisions

摘要

Content access may be provided and processed by assigning responsibility for obtaining entitlement data to the client's browser. Thus, in one example, the client may be configured to synchronize and coordinate data lookups associated with a content request, rather than relying on the server to do so. The network architecture may use a mediator design pattern, in which the client's browser acts as the mediator (i.e., middleman) between a content server and an entitlement data server. Accordingly, synchronous calls between server-side services might not be required. Instead, data necessary for the content server to process a client request for access to protected content may be received in the incoming request from the client's browser.

主权项

1. A method comprising:
receiving, by a first computing device from a second computing device, a redirect to a third computing device, wherein the redirect comprises a digital token comprising an indication that the redirect is authorized by the second computing device; validating, by the first computing device, the digital token; obtaining entitlement data for the first computing device or a user of the first computing device by following the redirect to the third computing device; transmitting the entitlement data for the first computing device or the user of the first computing device to the second computing device, wherein the entitlement data authorizes the first computing device or the user to access a content item; and after transmitting the entitlement data to the second computing device, receiving, by the first computing device, an unencrypted version of a location of the content item from the second computing device.