Method for scalable access control decisions

摘要

Content access may be provided and processed by assigning responsibility for obtaining entitlement data to the client's browser. Thus, in one example, the client may be configured to synchronize and coordinate data lookups associated with a content request, rather than relying on the server to do so. The network architecture may use a mediator design pattern, in which the client's browser acts as the mediator (i.e., middleman) between a content server and an entitlement data server. Accordingly, synchronous calls between server-side services might not be required. Instead, data necessary for the content server to process a client request for access to protected content may be received in the incoming request from the client's browser.

主权项

1. A method comprising:
receiving, by a client device, content data comprising an encrypted version of a location of one or more content items; requesting, by the client device from a content server, an entitlement data redirect to an entitlement server; receiving and following, by the client device, the entitlement data redirect to the entitlement server to obtain entitlement data for the client device or a user of the client device; transmitting, by the client device, the entitlement data for at least one of: the client device and the user of the client device, to the content server in association with a request for a content item of the one or more content items, wherein the entitlement data authorizes the at least one of: the client device and the user to access the content item; after transmitting the entitlement data to the content server, receiving, by the client device, an unencrypted version of a location of the content item from the content server; and retrieving, by the client device, the content item from the content server based on the unencrypted version of the location of the content item.