Distributed secure content delivery

摘要

Techniques for distributed and secure content delivery are provided. Requests for content are routed to a centralized service where the requestors are authenticated for access to the content. The centralized service generates access statements for the requesters. The requestors are redirected to particular distributed content services having access to the desired content. The distributed content services verify the access statements and vend the desired content to the requestors.

主权项

1. A content delivery system comprising:
a reverse proxy server device to execute a plurality of services, the services including: an identity service, to provide a single sign-on service for a single sign-on identity, the identity service to store a set of temporary identities and credentials which facilitate access to content for the single sign-on identity; a content vending service, to authenticate at least one of the temporary identities of the single sign-on identity, and to supply an access statement for the single sign-on identity; and a content delivery service, to authenticate a request for content from the single sign-on identity via the access statement, wherein the content delivery service verifies the access statement independently of the authentication of the temporary identities, and redirects the request for content after the authentication of the access statement.