Method for receiving content in user device over cdn

A method, carried out by a content provider system, comprising the steps of:

• receiving an access request to access a content from a user device;
• generating a session key for a communication session for receiving said content in the user device over a content delivery network,
• generating an access token including the session key in encrypted form;
• generating, by a DRM license server, a DRM license including the session key;
• and
• transmitting the access token and the DRM license to the user device.

A method, performed by a content delivery network, for delivering a content to a user device, comprising the steps of:

• receiving from a user device at least one content request including an access token for the requested content and an authentication tag;
• determining a session key based on the received access token by performing a decryption;
• checking the validity of the authentication tag of the user device with the determined session key;
• and
• transmitting content data related to the requested content in response to the received content request, if the authentication tag of the user device is valid, in a communication session.

A user device configured to perform the steps of:

• sending an access request to access a content to a content provider system;
• receiving, from the content provider system, an access token for said content, said access token including an encrypted session key, and a Digital Right Management, DRM, license, including the session key;
• and
• transmitting a content request including the received access token to a content delivery network and, in response, receiving from the content delivery network content data of the requested content, in a communication session, wherein the content request further comprises an authentication tag obtained by executing a cryptographic operation, performed by a DRM client module of the user device, of signing and/or encrypting, with the session key of the received DRM license, input data that is based on at least part of the content request.

A content service provider system including a DRM license server, configured to perform the steps of:

• receiving an access request to access a content from a user device;
• generating a session key for a communication session for receiving said content in the user device over a content delivery network,
• generating an access token including the session key in encrypted form;
• generating, by a DRM license server, a DRM license including the session key;
• and
• transmitting the access token and the DRM license to the user device.

A content delivery network, configured to perform the steps of:

• receiving from a user device at least one content request including an access token for the requested content and an authentication tag;
• determining a session key based on the received access token by performing a decryption;
• checking the validity of the authentication tag of the user device with the determined session key;
• and
• transmitting content data related to the requested content in response to the received content request, if the authentication tag of the user device is valid, in a communication session.