US 10,542,001 B1Granted

Content item instance access control

AssigneeAmazon Technologies, Inc.

InventorsHok Peng Leung, Bradley Heath

Life of this patent

Estimating the term…

Loading patent…

Abstract

Techniques for content item instance access control are described herein. A computing service provider may host execution of a plurality of instances of an interactive content item, such as a video game. Each content item instance may be accessible to a respective set of one or more authorized clients that are associated with the respective content item instance and that are authorized to access the respective content item instance. Additionally, in one embodiment, each content item instance may be inaccessible to one or more unauthorized clients, such as clients that are not associated with the respective content item instance and that are not included in the set of authorized clients. By limiting access to a content item instance to authorized clients, the content item instance may be protected from malicious users, such as hackers, DoS and DDos attackers, and other malicious users.

Claims17

Dependent claims

A system comprising:

one or more processors
one or more memories storing a set of instructions, which upon execution by the one or more processors, causes the one or more processors to perform operations comprising:
receiving, by a service, a first request for a first client to join an interactive video game, the interactive video game including a plurality of video game instances, wherein a plurality of access control components control access to the plurality of video game instances, each of the plurality of video game instances being associated with one or more respective access control components of the plurality of access control components;
determining a first Internet Protocol (IP) address associated with the first request;
associating the first client with a first instance of the plurality of video game instances, wherein the first instance is accessible to a set of one or more authorized clients and inaccessible to one or more unauthorized clients;
providing, by the service that receives the first request, the first IP address to one or more first access control components of the plurality of access control components, the one or more first access control components associated with the first instance;
maintaining, by the one or more first access control components, information regarding the set of one or more authorized clients to which the first instance is accessible;
associating the first IP address with the set of one or more authorized clients;
providing to the first client, address information associated with the first instance;
receiving a second request for the first client to connect to the first instance, the second request being associated with the first IP address;
determining, by the one or more first access control components, whether the first IP address associated with the second request is associated with the set of one or more authorized clients;
and if so,
providing the first client access to the first instance.

10 more elements

A method comprising:

receiving, by a service, a first request for a first client to join an interactive video game, the interactive video game including a plurality of video game instances, wherein a plurality of access control components control access to the plurality of video game instances, each of the plurality of video game instances being associated with one or more respective access control components of the plurality of access control components;
determining a first Internet Protocol (IP) address associated with the first request;
associating the first client with a first instance of the plurality of video game instances, wherein the first instance is accessible to a set of one or more authorized clients and inaccessible to one or more unauthorized clients;
providing, by the service that receives the first request, the first IP address to one or more first access control components of the plurality of access control components, the one or more first access control components associated with the first instance;
maintaining, by the one or more first access control components, information regarding the set of one or more authorized clients to which the first instance is accessible;
associating the first IP address with the set of one or more authorized clients;
providing to the first client, address information associated with the first instance;
receiving a second request for the first client to connect to the first instance;
determining, by the one or more first access control components, whether the first IP address associated with the second request is associated with the set of one or more authorized clients associated with the first instance;
and if so,
providing the first client access to the first instance.

8 more elements

A non-transitory computer-readable storage medium having stored thereon a set of instructions, which upon being performed by one or more computing devices, causes the one or more computing devices to perform operations comprising:

receiving, by a service, a first request for a first client to join an interactive video game, the interactive video game including a plurality of video game instances, wherein a plurality of access control components control access to the plurality of video game instances, each of the plurality of video game instances being associated with one or more respective access control components of the plurality of access control components;
determining a first Internet Protocol (IP) address associated with the first request;
associating the first client with a first instance of the plurality of video game instances, wherein the first instance is accessible to a set of one or more authorized clients and inaccessible to one or more unauthorized clients;
providing, by the service that receives the first request, the first IP address to one or more first access control components of the plurality of access control components, the one or more first access control components associated with the first instance;
maintaining, by the one or more first access control components, information regarding the set of one or more authorized clients to which the first instance is accessible;
associating the first IP address with the set of one or more authorized clients;
providing to the first client, address information associated with the first instance;
receiving a second request for the first client to connect to the first instance;
determining, by the one or more first access control components, whether the first IP address associated with the second request is associated with the set of one or more authorized clients associated with the first instance;
and if so,
providing the first client access to the first instance.

8 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/383,435Filed 19 Dec 2016
Granted: 21 Jan 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources
H04L 61/2517
Translation of Internet protocol [IP] addresses: using port numbers
H04L 61/5007
Address allocation: internet protocol [IP] addresses
H04L 63/0876
For authentication of entities: based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or…