Secure Challenge System for Verifying Access Rights to Media Content

摘要

Described is a technique for securely verifying access rights to a media file stored on a user device. By verifying the access rights to the media file, a server may provide access to a licensed version of the media from a media library in a remote location such as server for a cloud-based service. When a media file is confirmed to be available in a media library, a cryptographic a hash function that incorporates a random value or “salt” is used to verify that a user is in possession of an entire media file. Accordingly, the techniques described herein improve the security for verifying that a user is in possession of a media file by preventing the use of pre-calculated hashes.

主权项

1. A computer-implemented method of verifying access rights to a media file, comprising:
receiving, from a device associated with a user account, a first fingerprint generated from a media file stored on the device; determining a licensed version of the media file is available in a media library stored on a server by verifying that the received first fingerprint matches a second fingerprint generated from an instance of the licensed version of the media file; sending, to the device, a generated random value; receiving, from the device, a first hash value generated from a predefined portion of the media file combined with the generated random value; determining that the received first hash value matches a second hash value generated from the predefined portion of the instance of the licensed version of the media file combined with the generated random value; and authorizing the user account to remotely access the licensed version of the media file stored on the server.