# US 10,313,354 B2 · Systems and methods for efficient and secure temporary anonymous access to media content

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,313,354 B2
- Document ID: US10313354B2
- Status: Granted
- Kind: B2
- Application number: 15/726,274
- Filed: 2017-10-05
- Published: 2018-02-08
- Granted: 2019-06-04
- Earliest claimed: 2013-04-10
- Assignees: Spotify AB
- Applicants: Spotify AB
- Inventors: Henrik Tobias Lof; Marcus Per Vesterlund
- Web page: https://patentgrep.com/patent/US10313354B2

## CPC

- H04L 63/102: {Entity profiles}
- G06F 21/10: Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]}
- G06F 21/6254: {by anonymising data, e.g. decorrelating personal data from the owner's identification}
- G06Q 20/1235: {with control of digital rights management [DRM]}
- H04L 9/088: {Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms (network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068)}
- H04L 63/0421: {Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer}
- G06F 2221/2117: User registration
- G06F 2221/2137: Time limited access, e.g. to a computer or data
- H04L 2209/60: Digital content management, e.g. content distribution
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A method for providing access to media content from a media content provider is performed at an electronic device. The method comprises receiving, from a client device, a request for access to a media item. The method further comprises, in response to the request for access to the media item, initiating an analysis to determine whether the client device is authorized to access the requested media item based on detection of multiple different user identifiers using a same local-application universally unique identifier (UUID). A local-application UUID is assigned to each instance of an application provided by the media content provider. The method further comprises, in accordance with a determination that the client device is not authorized to access the requested media item based on detection of the multiple different user identifiers using the same local-application UUID, preventing access to the requested media item by the client device.

## Claims

### Claim 1

A method for providing access to media content from a media content provider, performed at an electronic device having one or more processors and memory storing one or more programs for execution by the one or more processors, the method comprising:
receiving, from a client device, a request for access to a media item;
in response to the request for access to the media item, initiating an analysis to determine whether the client device is authorized to access the requested media item based on detection of multiple requests from different self-describing user identifiers, wherein each respective self-describing user identifier is generated by the media content provider for a respective client device of a respective user that is not logged in to the media content provider, the multiple requests including a same local-application universally unique identifier (UUID), wherein a local-application UUID is assigned to each instance of an application from which at least one request of the multiple requests originates, the application provided by the media content provider; and
in accordance with a determination that the client device is not authorized to access the requested media item based on detection of the multiple requests from different self-describing user identifiers including the same local-application UUID, preventing access to the requested media item by the client device.

### Claim 2 (depends on 1)

The method of claim 1, further comprising, at the electronic device:
before receiving results of the analysis to determine whether the client device is authorized to access the requested media item, providing access to the requested media item to the client device;
wherein preventing access to the requested media item in accordance with the determination that the client device is not authorized to access the requested media item comprises, after the client device has been provided access to the requested media item, terminating access to the requested media item by the client device.

### Claim 3 (depends on 1)

The method of claim 1, wherein:
the request is received from an instance of the application on the client device; and
the request includes a local-application UUID assigned to the instance of the application on the client device.

### Claim 4 (depends on 3)

The method of claim 3, wherein the local-application UUID included in the request is the local-application UUID used in the analysis to determine whether the client device is authorized to access the requested media item.

### Claim 5 (depends on 1)

The method of claim 1, wherein the analysis to determine whether the client device is authorized to access the requested media item comprises identifying whether a number of different user identifiers using the same local-application UUID satisfies a threshold.

### Claim 6 (depends on 1)

The method of claim 1 wherein generating a respective self-describing user identifier includes populating one or more fields of a group consisting of:
a country identifier;
a product identifier;
a referrer identifier;
a time stamp;
an identifier of a license associated with the client device;
an advertisement permission indicator;
a version number associated with a client application;
a fingerprint corresponding to the client device; and
a local IP address.

### Claim 7

An electronic device, comprising:
one or more processors; and
memory storing one or more programs for execution by the one or more processors, the one or more programs including instructions for:
receiving, from a client device, a request for access to a media item;
in response to the request for access to the media item, initiating an analysis to determine whether the client device is authorized to access the requested media item based on detection of multiple requests from different self-describing user identifiers, wherein each respective self-describing user identifier is generated by the media content provider for a respective client device of a respective user that is not logged in to the media content provider, the multiple requests including a same local-application universally unique identifier (UUID), wherein a local-application UUID is assigned to each instance of an application from which at least one request of the multiple requests originates, the application provided by the media content provider; and
in accordance with a determination that the client device is not authorized to access the requested media item based on detection of the multiple requests from different self-describing user identifiers including the same local-application UUID, preventing access to the requested media item by the client device.

### Claim 8

A non-transitory computer-readable storage medium storing one or more programs executable by an electronic device with one or more processors, the one or more programs comprising instructions for:
receiving, from a client device, a request for access to a media item;
in response to the request for access to the media item, initiating an analysis to determine whether the client device is authorized to access the requested media item based on detection of multiple requests from different self-describing user identifiers, wherein each respective self-describing user identifier is generated by the media content provider for a respective client device of a respective user that is not logged in to the media content provider, the multiple requests including a same local-application universally unique identifier (UUID), wherein a local-application UUID is assigned to each instance of an application from which at least one request of the multiple requests originates, the application provided by the media content provider; and
in accordance with a determination that the client device is not authorized to access the requested media item based on detection of the multiple requests from different self-describing user identifiers including the same local-application UUID, preventing access to the requested media item by the client device.