# US 2025/0158992 A1 · Content Authorization and Delivery > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2025/0158992 A1 - Document ID: US20250158992A1 - Status: Published application - Kind: A1 - Application number: 19/002,230 - Filed: 2024-12-26 - Published: 2025-05-15 - Earliest claimed: 2018-09-28 - Assignees: Comcast Cable Communications, LLC - Applicants: Comcast Cable Communications, LLC - Inventors: Kyong Park; Jason Burgess; Garey Hassler; Greg Rutz - Web page: https://patentgrep.com/patent/US20250158992A1 ## CPC - H04L 63/10: {for controlling access to devices or network resources} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/108: {when the policy decisions are valid for a limited amount of time} - H04L 65/1063: Application servers providing network services (systems providing special services to telephonic subscribers H04M3/42) - H04L 65/612: for unicast - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP] - H04L 67/306: User profiles - H04L 67/535: {Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34)} - H04L 67/563: Data redirection of data network streams - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems, apparatuses, and methods are described for assisting a content delivery network (CDN) in managing access restrictions to content. Access restrictions and/or entitlements may be reflected in a signing package, which may be included in a content item manifest file. The signing package may also be passed in requests for the content item, and may be passed in a form to allow it to remain unaltered as it is routed to a destination computing device. ## Claims ### Claim 1 A method comprising: sending, by a user device to a computing device, a manifest file request comprising a uniform resource signing package as a query parameter to allow the uniform resource signing package to remain unaltered as the manifest file request is routed to the computing device, wherein the uniform resource signing package comprises information indicating a requested content item; receiving, by the user device, a response comprising a manifest file for the requested content item, wherein the manifest file comprises the uniform resource signing package and a listing of fragments of the requested content item; and sending, by the user device, a plurality of fragment requests for the fragments of the requested content item, wherein each of the fragment requests comprises a copy of the uniform resource signing package as a query parameter. ### Claim 2 (depends on 1) The method of claim 1, further comprising: receiving a plurality of responses, wherein each of the plurality of responses comprises an instruction to store a same copy of the uniform resource signing package as a cookie. ### Claim 3 (depends on 1) The method of claim 1, further comprising: sending a subsequent request for the requested content item; and receiving a response, to the subsequent request, that: denies the subsequent request; and redirects the user device to an access server that provided the user device with the uniform resource signing package. ### Claim 4 (depends on 1) The method of claim 1, wherein the query parameter is a uniform resource locator (URL) query string. ### Claim 5 (depends on 1) The method of claim 1, wherein the manifest file comprises a uniform resource locator (URL) for the requested content item, and the uniform resource signing package is included in the URL as a query parameter. ### Claim 6 A method comprising: sending, by a user device, a request for a manifest file for a requested content item, wherein the request comprises path information for the requested content item, and wherein, appended to the path information, is a query string comprising signed information indicating access parameters for the user device and the requested content item; receiving, by the user device, the manifest file, wherein the manifest file comprises a copy of the signed information indicating the access parameters for the user device and the requested content item; and sending a plurality of fragment requests for fragments of the requested content item, wherein each of the fragment requests comprises a copy of the signed information. ### Claim 7 (depends on 6) The method of claim 6, further comprising: receiving a message indicating that a change to the access parameters is needed. ### Claim 8 (depends on 6) The method of claim 6, further comprising: receiving a message indicating a change to a validity period that is indicated in the query string. ### Claim 9 (depends on 6) The method of claim 6, further comprising receiving: a denial of a subsequent request from the user device; and a redirect to obtain a new signing package that is based on a changed access parameter. ### Claim 10 A user device comprising: one or more processors; and memory storing instructions that, when executed by the one or more processors, configure the user device to: send, to a computing device, a manifest file request comprising a uniform resource signing package as a query parameter to allow the uniform resource signing package to remain unaltered as the manifest file request is routed to the computing device, wherein the uniform resource signing package comprises information indicating a requested content item; receive a response comprising a manifest file for the requested content item, wherein the manifest file comprises the uniform resource signing package and a listing of fragments of the requested content item; and send a plurality of fragment requests for the fragments of the requested content item, wherein each of the fragment requests comprises a copy of the uniform resource signing package as a query parameter. ### Claim 11 (depends on 10) The user device of claim 10, wherein the instructions, when executed by the one or more processors, further configure the user device to: receive a plurality of responses, wherein each of the plurality of responses comprises an instruction to store a same copy of the uniform resource signing package as a cookie. ### Claim 12 (depends on 10) The user device of claim 10, wherein the instructions, when executed by the one or more processors, further configure the user device to: send a subsequent request for the requested content item; and receive a response, to the subsequent request, that: denies the subsequent request; and redirects the user device to an access server that provided the user device with the uniform resource signing package. ### Claim 13 (depends on 10) The user device of claim 10, wherein the query parameter is a uniform resource locator (URL) query string. ### Claim 14 (depends on 10) The user device of claim 10, wherein the manifest file comprises a uniform resource locator (URL) for the requested content item, and the uniform resource signing package is included in the URL as a query parameter. ### Claim 15 A user device comprising: one or more processors; and memory storing instructions that, when executed by the one or more processors, configure the user device to: send a request for a manifest file for a requested content item, wherein the request comprises path information for the requested content item, and wherein, appended to the path information, is a query string comprising signed information indicating access parameters for the user device and the requested content item; receive the manifest file, wherein the manifest file comprises a copy of the signed information indicating the access parameters for the user device and the requested content item; and send a plurality of fragment requests for fragments of the requested content item, wherein each of the fragment requests comprises a copy of the signed information. ### Claim 16 (depends on 15) The user device of claim 15, wherein the instructions, when executed by the one or more processors, further configure the user device to receive a message indicating that a change to the access parameters is needed. ### Claim 17 (depends on 15) The user device of claim 15, wherein the instructions, when executed by the one or more processors, further configure the user device to receive a message indicating a change to a validity period that is indicated in the query string. ### Claim 18 (depends on 15) The user device of claim 15, wherein the instructions, when executed by the one or more processors, further configure the user device to receive: a denial of a subsequent request from the user device; and a redirect to obtain a new signing package that is based on a changed access parameter. ### Claim 19 One or more non-transitory, computer-readable media storing instructions that, when executed, configure a user device to: send, to a computing device, a manifest file request comprising a uniform resource signing package as a query parameter to allow the uniform resource signing package to remain unaltered as the manifest file request is routed to the computing device, wherein the uniform resource signing package comprises information indicating a requested content item; receive a response comprising a manifest file for the requested content item, wherein the manifest file comprises the uniform resource signing package and a listing of fragments of the requested content item; and send a plurality of fragment requests for the fragments of the requested content item, wherein each of the fragment requests comprises a copy of the uniform resource signing package as a query parameter. ### Claim 20 (depends on 19) The one or more non-transitory, computer-readable media of claim 19, wherein the instructions, when executed, further configure the user device to: receive a plurality of responses, wherein each of the plurality of responses comprises an instruction to store a same copy of the uniform resource signing package as a cookie. ### Claim 21 (depends on 19) The one or more non-transitory, computer-readable media of claim 19, wherein the instructions, when executed, further configure the user device to: send a subsequent request for the requested content item; and receive a response, to the subsequent request, that: denies the subsequent request; and redirects the user device to an access server that provided the user device with the uniform resource signing package. ### Claim 22 (depends on 19) The one or more non-transitory, computer-readable media of claim 19, wherein the query parameter is a uniform resource locator (URL) query string. ### Claim 23 (depends on 19) The one or more non-transitory, computer-readable media of claim 19, wherein the manifest file comprises a uniform resource locator (URL) for the requested content item, and the uniform resource signing package is included in the URL as a query parameter. ### Claim 24 One or more non-transitory, computer-readable media storing instructions that, when executed, configure a user device to: send a request for a manifest file for a requested content item, wherein the request comprises path information for the requested content item, and wherein, appended to the path information, is a query string comprising signed information indicating access parameters for the user device and the requested content item; receive the manifest file, wherein the manifest file comprises a copy of the signed information indicating the access parameters for the user device and the requested content item; and send a plurality of fragment requests for fragments of the requested content item, wherein each of the fragment requests comprises a copy of the signed information. ### Claim 25 (depends on 24) The one or more non-transitory, computer-readable media of claim 24, wherein the instructions, when executed, further configure the user device to receive a message indicating that a change to the access parameters is needed. ### Claim 26 (depends on 24) The one or more non-transitory, computer-readable media of claim 24, wherein the instructions, when executed, further configure the user device to receive a message indicating a change to a validity period that is indicated in the query string. ### Claim 27 (depends on 24) The one or more non-transitory, computer-readable media of claim 24, wherein the instructions, when executed, further configure the user device to receive: a denial of a subsequent request from the user device; and a redirect to obtain a new signing package that is based on a changed access parameter. ### Claim 28 A system comprising: a user device and a computing device, wherein the user device is configured to: send, to the computing device, a manifest file request comprising a uniform resource signing package as a query parameter to allow the uniform resource signing package to remain unaltered as the manifest file request is routed to the computing device, wherein the uniform resource signing package comprises information indicating a requested content item; receive a response comprising a manifest file for the requested content item, wherein the manifest file comprises the uniform resource signing package and a listing of fragments of the requested content item; and send a plurality of fragment requests for the fragments of the requested content item, wherein each of the fragment requests comprises a copy of the uniform resource signing package as a query parameter, and wherein the computing device is configured to receive the manifest file request. ### Claim 29 (depends on 28) The system of claim 28, wherein the user device is further configured to: receive a plurality of responses, wherein each of the plurality of responses comprises an instruction to store a same copy of the uniform resource signing package as a cookie. ### Claim 30 (depends on 28) The system of claim 28, wherein the user device is further configured to: send a subsequent request for the requested content item; and receive a response, to the subsequent request, that: denies the subsequent request; and redirects the user device to an access server that provided the user device with the uniform resource signing package. ### Claim 31 (depends on 28) The system of claim 28, wherein the query parameter is a uniform resource locator (URL) query string. ### Claim 32 (depends on 28) The system of claim 28, wherein the manifest file comprises a uniform resource locator (URL) for the requested content item, and the uniform resource signing package is included in the URL as a query parameter. ### Claim 33 A system comprising: a user device and a computing device, wherein the user device is configured to: send a request for a manifest file for a requested content item, wherein the request comprises path information for the requested content item, and wherein, appended to the path information, is a query string comprising signed information indicating access parameters for the user device and the requested content item; receive the manifest file, wherein the manifest file comprises a copy of the signed information indicating the access parameters for the user device and the requested content item; and send a plurality of fragment requests for fragments of the requested content item, wherein each of the fragment requests comprises a copy of the signed information, and wherein the computing device is configured to receive the request for the manifest file. ### Claim 34 (depends on 33) The system of claim 33, wherein the user device is configured to receive a message indicating that a change to the access parameters is needed. ### Claim 35 (depends on 33) The system of claim 33, wherein the user device is configured to receive a message indicating a change to a validity period that is indicated in the query string. ### Claim 36 (depends on 33) The system of claim 33, wherein the user device is configured to receive: a denial of a subsequent request from the user device; and a redirect to obtain a new signing package that is based on a changed access parameter.