Separating the authorization of content access and content delivery using multiple cryptographic digital signatures

A system comprising:

• a memory;
• and
• a processing device, coupled to the memory, to:
• receive a first request for content from a client device, wherein the first request comprises a resource locator provided by an authorizing data service to authorize the client device to obtain the requested content, the resource locator identifying a first server of a content distribution network (CDN) to deliver the requested content to the client device, and comprising a first digital signature associated with authorization of the client device to access the requested content, and a second digital signature associated with authorization of delivery of the requested content for access by the client device;
• identifying an occurrence of an event that indicates a change in the delivery of the requested content for access by the client device;
• responsive to identifying the occurrence of the event, generating a third digital signature associated with a changed delivery of the requested content for access by the client device;
• and
• providing a new resource locator to the client device, the new resource locator comprising the first digital signature associated with authorization of the client device to access the requested content and the third digital signature associated with the changed delivery of the requested content for access by the client device, wherein the client device is operative to access the content using the new resource locator.

A non-transitory computer-readable medium comprising instructions that, responsive to execution by a processing device, cause the processing device to perform operations comprising:

• receiving, by the processing device, a first request for content from a client device, wherein the first request comprises a resource locator provided by an authorizing data service to authorize the client device to obtain the requested content, the resource locator identifying a first server of a content distribution network (CDN) to deliver the requested content to the client device, and comprising a first digital signature associated with authorization of the client device to access the requested content, and a second digital signature associated with authorization of delivery of the requested content for access by the client device;
• identifying an occurrence of an event that indicates a change in the delivery of the requested content for access by the client device;
• responsive to identifying the occurrence of the event, generating a third digital signature associated with a changed delivery of the requested content for access by the client device;
• and
• providing a new resource locator to the client device, the new resource locator comprising the first digital signature associated with authorization of the client device to access the requested content and the third digital signature associated with the changed delivery of the requested content for access by the client device, wherein the client device is operative to access the content using the new resource locator.