# US 12,111,892 B2 · Streamlined digital rights management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,111,892 B2 - Document ID: US12111892B2 - Status: Granted - Kind: B2 - Application number: 16/844,963 - Filed: 2020-04-09 - Published: 2020-09-24 - Granted: 2024-10-08 - Earliest claimed: 2016-04-27 - Assignees: Comcast Cable Communications, LLC - Applicants: Comcast Cable Communications, LLC - Inventors: Kyong Park - Web page: https://patentgrep.com/patent/US12111892B2 ## CPC - G06F 21/105: {Arrangements for software license management or administration, e.g. for managing licenses at corporate level} - H04L 9/088: {Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms (network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068)} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/102: {Entity profiles} - H04L 67/306: User profiles - G06F 21/107: {License processing; Key processing} - H04L 2463/101: applying security measures for digital rights management - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A streamlined workflow for digital rights management (DRM) licensing for content such as media assets is achieved via an authentication server establishing an authenticated session that is referenced by other processes, whereby a content grant may include a key to desired encrypted content with a portion of the content or content meta-data. The authentication server verifies the user's identity and provides a session grant including a session security mechanism, such as a token, session key, or negotiated secret. The session grant may be used to obtain a content authorization from a content router. The content authorization includes an address at which the content may be found and may be decorated with security mechanisms. The session grant and/or content authorization may include an entitlement record reflecting the user's entitlements to access content. The session grant and/or content authorization may be used to obtain a content grant from a content server. ## Claims ### Claim 1 A method comprising: negotiating, by a content server and with a license server, a license associated with media content; receiving, by the content server and from a user device, a request to access the media content, wherein the request to access the media content comprises an indication of an authentication of the user device, wherein the authentication of the user device is performed via a session between the user device requesting access and an authentication server that is associated with the content server; determining, by the content server and based on the indication of the authentication, to grant access to the media content; and sending, by the content server and to the user device, a content grant comprising a content key, wherein the content key is embedded in a manifest associated with the media content, and wherein the content key is based on the license, and wherein the media content is delivered to the user device via a session different from the session between the user device and the authentication server. ### Claim 2 (depends on 1) The method of claim 1, wherein determining to grant access to the media content comprises determining entitlements associated with a user account associated with the user device and pertaining to accessing media. ### Claim 3 (depends on 1) The method of claim 1, wherein the authentication of the user device comprises one or more of the following: associating a security token with the session between the user device and the authentication server; establishing a session key between the user device and the authentication server; or negotiating a shared secret between the user device and the authentication server. ### Claim 4 (depends on 3) The method of claim 3, wherein the determining to grant access to the media content further comprises determining that the security token, the session key, or the shared secret is valid. ### Claim 5 (depends on 1) The method of claim 1, wherein the determining to grant access to the media content further comprises evaluating a connection status. ### Claim 6 (depends on 1) The method of claim 1, wherein the license is configured to limit a video playback of the media content according to a resolution or ad-insertion policy. ### Claim 7 A system comprising: a license server; and a content server configured to: negotiate, with the license server, a license associated with media content; receive, from a user device, a request to access the media content, wherein the request to access the media content comprises an indication of an authentication of the user device, wherein the authentication of the user device is performed via a session between the user device requesting access and an authentication server that is associated with the content server; determine, based on the indication of the authentication, to grant access to the media content; and send, to the user device, a content grant comprising a content key, wherein the content key is embedded in a manifest associated with the media content, and wherein the content key is based on the license, and wherein the media content is delivered to the user device via a session different from the session between the user device and the authentication server. ### Claim 8 (depends on 7) The system of claim 7, wherein the content server is further configured to determine to grant access to the media content based at least in part on entitlements, wherein the entitlements are associated with a user account associated with the user device and pertain to accessing media. ### Claim 9 (depends on 8) The system of claim 8, wherein the request to access media content comprises the entitlements. ### Claim 10 (depends on 7) The system of claim 7, wherein the authentication of the user device comprises one or more of association of a security token between the user device and the authentication server, establishment of a session key between the user device and the authentication server, or an acknowledgement of a negotiated shared secret between the user device and the authentication server. ### Claim 11 (depends on 10) The system of claim 10, wherein the content server is further configured to determine to grant access based, at least in part, on determining a validity of the security token, the session key, or the shared secret. ### Claim 12 (depends on 7) The system of claim 7, wherein the content server is further configured to determine to grant access based, at least in part, on a connection status. ### Claim 13 (depends on 7) The system of claim 7, wherein the license is configured to limit a playback of the media content according to a resolution or ad-insertion policy. ### Claim 14 A non-transitory computer-readable medium storing instructions that, when executed, cause: negotiating, by a content server and with a license server, a license associated with media content; receiving, by the content server and from a user device, a request to access the media content, wherein the request to access the media content comprises an indication of an authentication of the user device, wherein the authentication of the user device is performed via a session between the user device requesting access and an authentication server that is associated with the content server; determining, by the content server and based on the indication of the authentication, to grant access to the media content; and sending, by the content server and to the user device, a content grant comprising a content key, wherein the content key is embedded in a manifest associated with the media content, and wherein the content key is based on the license, and wherein the media content is delivered to the user device via a session different from the session between the user device and the authentication server. ### Claim 15 (depends on 14) The non-transitory computer-readable medium of claim 14, wherein the instructions cause the determining to grant access to the media content by determining entitlements associated with a user account associated with the user device and pertaining to accessing media. ### Claim 16 (depends on 14) The non-transitory computer-readable medium of claim 14, wherein the instructions, when executed, further cause one or more of the following: associating a security token with the session between the user device and the authentication server; establishing a session key between the user device and the authentication server; or negotiating a shared secret between the user device and the authentication server. ### Claim 17 (depends on 16) The non-transitory computer-readable medium of claim 16, wherein the instructions cause the determining to grant access to the media content by determining that the security token, the session key, or the shared secret is valid. ### Claim 18 (depends on 14) The non-transitory computer-readable medium of claim 14, wherein the instructions cause the determining to grant access to the media content by evaluating a connection status. ### Claim 19 (depends on 14) The non-transitory computer-readable medium of claim 14, wherein the license is configured to limit a video playback of the media content according to a resolution or ad-insertion policy. ### Claim 20 (depends on 14) The non-transitory computer-readable medium of claim 14, wherein the request to access media content comprises entitlements.