# Patent

## Title
System, method, and infrastructure for real-time live streaming content

## Abstract

Provided are systems and methods for using an existing management server infrastructure to deliver video-on-demand or streaming content, including real-time live streaming. Existing client content playback devices, such as IPTVs, may be employed to stream content items, obtain advertisements, track user's viewing behaviors, and the like. By reusing existing client devices, there is no need for additional hardware purchases on the user side. By reusing existing management server infrastructures, capital expenses are also reduced. In such a system, a user can watch both video-on-demand and streaming audiovisual content.

## Background
BACKGROUND
Infrastructures exist to provide Internet video from various content providers or services. For example, the Sony Bravia® Internet Link (“BIVL”) technology from Sony Corporation provides a hardware device which when coupled to a broadband Internet connection allows access to Internet video services through a management server infrastructure. Such infrastructures deliver recorded audiovisual media content such as video, music, and audio files.
Streaming refers to a delivery of media content in a constant fashion, from a transmission at a source to a reception and presentation at a receiver. For example, Internet delivery of digital content presentations to network computers is commonly streamed, as is Internet television content. Current streamed content is delivered using protocols such as HTTP, and while certain parameters are specified, e.g., when to retrieve content files, what tags are involved, etc., the same do not provide a full streaming solution. While useful for many applications, creating any new live streaming content infrastructure requires new hardware, software, and significant investment.
In addition, in many cases it is not feasible for a service provider to provide the security and client management infrastructure required to protect and deliver streaming content. In some cases costs are prohibitive, and providing such infrastructure may not be consistent with the business model of the service provider. Moreover, even when such may be accomplished by a service provider, having a plurality of service providers multiplies costs and effort. Accordingly, there is a need for a better way to provide streaming services for service providers.
SUMMARY
Implementations of the system and method use an existing management server infrastructure to deliver video-on-demand or streaming content, including real-time live streaming. Existing client content playback devices, such as IPTVs, may be employed to stream content items, obtain advertisements, track user's viewing behaviors, and the like. By reusing existing client devices, there is no need for additional hardware purchases on the user side. By reusing existing management server infrastructures, capital expenses are also reduced. In such a system, a user can watch both video-on-demand and streaming audiovisual content.
Implementations of the system and method further provide a methodology and protocol to enable an IPTV device to access and obtain streaming or video-on-demand content. While the description below will primarily refer to streaming or video-on-demand content, it will be understood that systems and methods according to the principles described will be applicable to real time live streaming content as well as other such content. Moreover, the terms “content item”, “content”, and “asset”, will generally be used interchangeably, unless the context dictates otherwise.
After a service provider's streaming content metadata has been ingested for posting by the system, or after a third-party service provider's streaming content is available to be consumed, the methodology and protocol allow an IPTV device to access, obtain, and consume the content. In so doing, the IPTV device may indicate support for live streaming by transmitting its capabilities to a management server via a service manager module.
The system and method may employ several components and steps. The flow starts at a source of content feeding into a media encoder system. A particular implementation is described below, but it will be understood that variations of file types, protocols, or the like, may be employed according to the requirements of a given application. The media encoder system encodes an incoming audiovisual media stream, live or prerecorded, into, e.g., a BIVL-compatible audiovisual stream, e.g., an MPEG2-TS stream. The encoded MPEG2-TS stream feeds into a media segmenter or slicer, which slices the stream into one or more streams or files. A next step is a generation of a plain text file, e.g., an M3U8 file, having filename extension .m3u8, that contains URI's to the sliced streams or files with filename extension .ts. When the file is generated, it may be encrypted, e.g., with AES-128 bit with CBC and VI value 8, and uploaded or placed into a web server folder where it may be accessed and retrieved by authenticated IPTV clients.
Before an IPTV client can have knowledge of the location of these files, the client may be authenticated in an appropriate fashion, e.g., through the management server infrastructure. When an authenticated IPTV client indicates its support for streaming, the same is presented with a list of streaming services. When a live streaming service is selected, a list may be provided of both live streaming and video-on-demand audiovisual media content, which may be services, categories, or assets. Upon selecting a service, category, asset, or a combination of these, in sequence, the management server and/or service provider may perform authentication. Once authenticated, the IPTV client can decrypt the encrypted .ts file and begin live streaming content playback.
The system and method further provide a methodology and protocol to enable an IPTV device to access and obtain a streaming asset. After a service provider's streaming content metadata has been ingested into a management server infrastructure, or after a third-party service provider's streaming content is available to be consumed, the system and method provide definitions and protocols for an IPTV device to access, obtain, and consume the content. In particular, the system and method may employ a management server assets list and asset information APIs with a protocol such as HTTPS and security such as a hash value for checksum. In this way, it may integrate streaming assets into a current asset specification of a management server infrastructure such that a service provider may specify its streaming content to IPTV clients. Conversely, IPTV clients may specify their capabilities to support streaming content to a content source. In this way, IPTV clients may securely access, obtain, and playback or consume a streaming asset.
In more detail, after streaming assets are placed in a web folder as described above, the service provider may enable its streaming content to be retrieved by IPTV devices by adding definitions to API responses, such as from a management server infrastructure. The additional definitions may include, e.g., apiContents and apiInformation responses. In one implementation, it may add the following: <source> attributes streams_types=“HTTPLS”; protocol=“https”; and metafile_types=“M3U8”, which may then identify the content as, e.g., live streaming content. In addition, the <source> value may contain the URI to an .m3u8 file. In these specific implementations, in order for an IPTV client to playback the content, it should support the M3U8 metafile type and use a protocol such as HTTPS. Other types and protocols will be understood for other implementations.
Once the service provider has determined that a client supports live streaming content, it returns the correct asset list or asset. The client makes an apiContents and apiInformation call, in the above implementation, using HTTPS to the URI of the .m3u8 file to retrieve the content to be played. It is noted that such calls may be made even for non-streaming content.
In other implementations, the systems and methods according to the principles described enable live streaming on a management server infrastructure using a hosting server as a turnkey solution. In this way, service providers who are unable to provide their own streaming infrastructure may leverage a common hosting server or servers for this purpose.
In one such implementation, metadata about streaming files are formatted into, e.g., an XML file, and ingested into a hosting server, and in particular an ingest module on the hosting server. The metadata is thus hosted on the hosting server. The hosting server may handle all authentication and security for requesting clients and may return URIs to index files associated with streaming contents, e.g., .m3u8 files. An authenticated IPTV client indicates its support for streaming to a service manager module of a management server and is presented with a list of available streaming services. When a streaming service is selected, a call may be made to a hosting server which returns a list of both live streaming and video on-demand audiovisual media content. Upon selection of an asset, the hosting server may perform authentication. Once authentication is successful performed, the IPTV client may call and decrypt the encrypted .ts file and begin streaming content playback.
A user may select content for streaming in any number of ways, including using a standard remote control in combination with the content playback device or using a second display, the former being associated with a user account and the latter optionally so associated. The use of second display devices in such contexts has certain benefits because the same provides complementary functionality to the IPTV, but generally does not require additional investment by the user because the same make use of a device, e.g., a smartphone, laptop computer, tablet computer, a desktop, an Internet appliance, etc., which most users already have in their possession. Additional details about such second displays and their interactions with content playback devices, e.g., through proxy servers and otherwise, may be seen from Applicants' co-pending U.S. patent application Ser. No. 13/077,181, filed Mar. 31, 2011, entitled “PERSONALIZED SECOND DISPLAY BROWSING EXPERIENCE DUE TO MULTIPLE SESSION FEATURE”, owned by the assignee of the present application and incorporated herein by reference in its entirety.
Where second displays are employed, the same may include any device that can run an application that communicates with a content playback device, including, but not limited to, personal computers, laptop computers, notebook computers, netbook computers, handheld computers, personal digital assistants, mobile phones, smart phones, tablet computers, hand-held gaming devices, gaming consoles, and also on devices specifically designed for these purposes, in which case the special device would include at least a processor and sufficient resources and networking capability to run the second display application.
In a general method, including use of a second display, a user has a user account with a source or clearinghouse of services. Here, the source or clearinghouse is represented as a management server, but it should be understood that the user account may be with a service provider directly. The management server communicates with at least one content server (generally associated with the service provider) such that the content server provides content items such as streaming assets for presentation or access at the content playback device. The user account has information stored thereon related to what content playback devices are associated with the user account. When a user logs on, they may see this list of content playback devices and may choose a particular content playback device. Once a content playback device has been chosen, a list of services may be displayed from which the user may choose. From a chosen service, a user may select a content item for streaming viewing, undergoing an affiliation or authentication step if required by the service. Additional details may be found in the application incorporated by reference above.
In one aspect, the invention is directed towards a method for hosting assets and metadata about assets from service providers, the assets for streaming or video-on-demand, including: receiving a metadata file from a service provider or content delivery network, the metadata file associated with an asset in a web folder, the asset streamed or video-on-demand, the folder including an index file and a plurality of transport stream files; receiving a request from a content playback device having authentication credentials to receive the asset; and providing a URI to the content playback device, the URI providing a location of the index file from which the content playback device may receive the content, the location associated with a service provider or content delivery network.
Implementations of the invention may include one or more of the following. The metadata file may be an XML file. The method may further include receiving a user token from the content playback device, the user token having been provided to the content playback device by a management server upon authentication. The authentication credential may be associated with a user account, and the method may further include delivering an advertisement to the content playback device, a choice of advertisement at least partially based on data in the user account. The authentication credential may be associated with a user account, and the method may further include delivering a recommendation of an additional content item to the content playback device, the recommendation at least partially based on data in the user account. The providing a URI may include providing a proxy URI to the content playback device, the proxy URI convertible to an actual URI only at the content delivery network, such that the actual location of a URI file is hidden to the content playback device.
In another aspect, the invention is directed towards a non-transitory computer-readable medium, including instructions for causing a computing device to implement the above method.
In another aspect, the invention is directed towards a server system to host, authenticate, and arrange for delivery of assets to a content playback device, including: an ingest module to receive a file containing metadata about an asset; an authentication module to receive an authentication credential from a content playback device upon request for the asset; and an service or asset module for providing a URI of an index file to the content playback device, the index file corresponding to the asset, the URI allowing the content playback device to access the index file from a service provider or content delivery network. The system may further include an advertising module, the advertising module for providing advertising to the content playback device at least partially based on data associated with a user account associated with the content playback device. The system may further include a recommendation module, the recommendation module for providing recommendations of content items to the content playback device at least partially based on data associated with a user account associated with the content playback device. The system may further include a proxy module, the proxy module communicating with the index file module to provide a proxy URI to the content playback device, the proxy URI convertible to an actual URI by the content delivery network when received from the content playback device.
In another aspect, the invention is directed towards a method of ingesting metadata about content items from at least two service providers, including: receiving information about at least one content item from a first service provider at a hosting server, the information including at least one of a stream type, a metafile type, and a video type, the content item for video-on-demand or for streaming; receiving information about at least one content item from a second service provider at a hosting server, the information including at least one of a stream type, a metafile type, and a video type, the content item for video-on-demand or for streaming; and storing the information from the first and second service providers on the hosting server.
Implementations of the invention may include one or more of the following. The method may further include receiving a request for a content item from a client device at the hosting server, and upon successful authentication of the client device, providing a URI to the requesting client device, the URI corresponding to a network location of an index file associated with the content item, the network location not that of the hosting server. The metafile may be an XML file. The method may further include receiving a user token from the client device, the user token having been provided to the client device by a management server upon authentication. The authentication credential may be associated with a user account, and the method may further include delivering an advertisement to the client device, a choice of advertisement at least partially based on data in the user account. The authentication credential may be associated with a user account, and the method may further include delivering a recommendation of an additional content item to the client device, the recommendation at least partially based on data in the user account. The providing a URI may include providing a proxy URI to the client device, the proxy URI convertible to an actual URI only at the content delivery network, such that the actual location of a URI file is hidden to the client device.
In another aspect, the invention is directed towards a non-transitory computer-readable medium, including instructions for causing a computing device to implement the above method.
Advantages of certain implementations of the system and method may include one or more of the following. Existing management server infrastructures may be reused to deliver streaming content in a cost-efficient manner, as well as providing security, content management, and client management. Existing IPTV clients may be employed to stream content, obtain advertisements, and track user's viewing behaviors. Users may be enabled to view both video-on-demand and live streaming audiovisual content. The system and method are highly scalable. The system and method may be conveniently employed to deliver live content to existing content playback devices from sources such as concert venues, sporting events, movie events, and the like, thus adding tremendous value to existing customers as well as being another source of revenue generation to the operator of a management server infrastructure. The system and method may further be employed to deliver advertising, opening advertising revenue streams from client companies and third-party advertisers. The system and method may allow the delivery of ads that are tailored to a user's live streaming history and behaviors. The system and method may provide secure authentication for IPTV clients and may validate clients using parameters such as TV_ID and user token. The system and method may provide for revocation and rejection of potential malicious IPTV clients. The system and method may provide for the hiding of URIs associated with M3U8 files making the location of streaming content items unknown to potential attackers who wish to perform denial of service attacks. The system and method may filter streaming content services based on what client capabilities have been noted, and may present streaming contents only to supported clients. The system and method allow a service provider to specify its streaming content such that a content playback device may access, obtain, and play the same. In this way, the service provider may integrate streaming content information into an existing management server infrastructure in a convenient fashion. Systems and methods according to the principles described here further allow a turnkey solution for service providers who desire to securely stream content items to client systems, but who lack the infrastructure to provide such solutions on their own.
Other advantages will be apparent from the description that follows, including the figures and claims.



BRIEF DESCRIPTION OF THE DRAWINGS
Like reference numerals denote like elements throughout.
FIG. 1 is a block diagram of an exemplary system in accordance with an aspect of the present principles, illustrating a management server and content delivery network which may be employed to deliver streaming or video-on-demand content to a content playback device.
FIG. 2 is a block diagram of a more detailed exemplary system in accordance with an aspect of the present principles, illustrating a management server and content delivery network which may be employed to deliver streaming for video-on-demand content to a content playback device.
FIG. 3 is a flowchart illustrating an exemplary method according to another aspect of the present principles, the method for delivering streaming and/or video-on-demand content.
FIG. 4 is a flowchart illustrating an exemplary method according to a further aspect of the present principles, the method for delivering streaming and/or video-on-demand content.
FIG. 5 is a block diagram of another exemplary system in accordance with an aspect of the present principles, illustrating ways in which the system may detect and treat malicious or denial-of-service activity from a content playback device.
FIG. 6 is a flowchart illustrating an exemplary method according to a further aspect of the present principles, the method for detecting malicious or denial-of-service activity during retrieval of streaming and/or video-on-demand content.
FIG. 7 is a flowchart illustrating an exemplary method according to a further aspect of the present principles, the method for retrieving streaming and/or video-on-demand content.
FIG. 8 is a flowchart illustrating an exemplary method according to a further aspect of the present principles, the method for retrieving streaming and/or video-on-demand content.
FIG. 9 is a code sample illustrating an exemplary API call according to a further aspect of the present principles, the method for retrieving streaming and/or video-on-demand content.
FIG. 10 is a code sample illustrating an exemplary API call according to a further aspect of the present principles, the method for retrieving streaming and/or video-on-demand content.
FIG. 11 is a block diagram of another exemplary system in accordance with an aspect of the present principles, illustrating a management server, hosting server, and content delivery network, which may be employed to host metadata, provide authentication and security, and arrange for delivery of streaming content to a content playback device.
FIG. 12 is a code sample illustrating an exemplary ingest file, in XML, sent from a service provider to a hosting server, from which a hosting server receives metadata for hosting pertaining to available streaming and video-on-demand content.
FIG. 13 is a flowchart illustrating an exemplary method according to another aspect of the present principles, the method for hosting metadata, providing authentication and security, and arranging for delivery of streaming content to a content playback device.
FIG. 14 is a flowchart illustrating another exemplary method according to an aspect of the present principles, the method for hosting metadata, providing authentication and security, and arranging for delivery of streaming content to a content playback device.
FIG. 15 is a diagram illustrating an exemplary user interface from which users may select live content, video-on-demand content, or mixed content.
FIG. 16 is a diagram illustrating various types of streaming, including windowed streaming, appended streaming, and a combination of appended and windowed.
FIG. 17 is a block diagram of another exemplary system in accordance with an aspect of the present principles, illustrating a management server, hosting server, and content delivery network, which may be employed to host metadata, provide authentication and security, and arrange for delivery of streaming content to a content playback device.
FIG. 18 is a flowchart illustrating an exemplary method according to another aspect of the present principles, the method employing a hosting server to host metadata, provide authentication and security, and deliver streaming content to a content playback device.
FIG. 19 is a flowchart illustrating an exemplary method according to another aspect of the present principles, the method for hosting metadata on a hosting server.
FIG. 20 illustrates an exemplary computing environment, e.g., that of the disclosed IPTV or client device, management server, second display, or the like.



DETAILED DESCRIPTION
Referring to FIG. 1, a system 10 is shown including a content playback device 12 coupled to a local network 16, which may be wired, wireless, or a combination of both. Also coupled to the local network 16 are one or more remote controls 14a, which may be of any type capable of providing input through a user interface 28 having input controls 32 to the content playback device 12 in order to control a user interface 15 having various menu options. Besides the remote control 14a, a second display 14b may also be employed to control content playback devices on the local network 16. The second display 14b may employ a user interface 34 running a control application 36. The second display 14b may in some cases be a laptop, tablet, handheld computer, or other Internet appliance, or may include a mobile device such as a smart phone, which may be directly connected to the Internet 26 or to the local network 16, or both. Other types of second displays will also be understood, including desktop computers or the like. The control application 36 may operate the content playback device through the local network 16 either as part of the local network or even from a location external to the local network.
A number of servers may be accessed by the content playback device 12 through the local network 16 and the Internet 26, including a management server 40 and one or more content servers 22 corresponding to service providers (only one is shown in FIG. 1). The servers may communicate with a content delivery network 24 to enable content items to be delivered to the content playback device 12.
With the system 10 of FIG. 1, the user is provided with a convenient and flexible way to select content items for streaming.
A more detailed implementation of the system is illustrated in FIG. 2, in which a system 10′ is shown in which the content playback device 12 is coupled to a management server 40 through a service manager module 66. The content playback device is also coupled to a service provider 30. The coupling of the content playback device 12 to the management server 40 and the service provider 30 is generally through the local network 16 and Internet 26.
The service manager module 66 provides the initial gateway for content between the content playback device and the management server 40. When the content playback device 12 requests a login to the management server 40, it provides a TV_ID to the service manager module 66. Using the TV_ID the management server 40 can determine the client device capabilities, e.g., in terms of streaming. The service manager module 66 in turn returns a user token to the content playback device 12. Authentication by the service manager module 66 allows the content playback device to access the management server infrastructure and see available services. Thus, following such login, the content playback device may request a list of available services from the management server, and such list may be returned to the content playback device. The content playback device 12 may then request a service, an asset within the service, or the like. Generally access of a particular service and the assets thereof will require affiliation and/or authentication with that service.
The management server 40 provides a data service with a number of functions. For example, an authentication module 46 may be provided to allow the authentication of client devices such as content playback devices, e.g., IPTVs, if such is not provided by the service manager module. A service module 44 may be employed to provide a service list to the content playback device 12. It will be noted that such service lists, as well as asset lists and other user interface modules, may be provided to a second display as well as to a content playback device 12. However, such second displays will generally use the authentication credentials of the content playback device 12 to access the actual streaming content items, unless the same are provided free of authentication.
An asset module 48 may be provided to deliver a list of assets corresponding to a service as may be provided by the service module 44. It is noted that in some cases user selection of a service may lead to delivery of a streaming asset, while in other cases, user selection of a service leads to a list of assets or categories of assets for selection. In implementations described here, selection of the service may lead to presentation of a grid of available content items, e.g., organized by whether they are video-on-demand, real-time live streaming, upcoming in the future, or the like.
A filter module 52 may be provided to filter assets or services from being delivered to a content playback device, based on a number of factors. For example, one such filter is if a content playback device can support the service or asset. Another filter is if the content playback device is affiliated with the service. If not, such services may be filtered out. Other factors will also be understood.
A proxy module 54 may be provided to serve a proxy function with respect to URIs of content items which are sent to a requesting content playback device. As will be explained in greater detail below, URIs provided to the content playback device may be proxy URI's, which are translated to an actual URI by a service provider or content delivery network. In this way, the actual location of content files is hidden from potential unauthorized access. Another module illustrated in FIG. 2 is a D.O.S. module, or “denial of service” module 56. The denial of service module 56 may be employed to test if a content playback device 12 is acting in a malicious manner. For example, the denial of service module 56 may test if a large number of accesses is indicative of malicious activity, or if a TV_ID has been counterfeited. In general, such activity may be flagged if a number of accesses exceeds a predetermined threshold number over a predetermined period of time.
A viewing or transaction history associated with the user account may be employed to personalize management server functionality. Such personalization modules are illustrated in element 58. In one case, an advertising module 62 may be employed to tailor ads delivered to a user based on user tastes as determined by a number of factors, these factors and methods described in U.S. patent application Ser. No. 13/313,740, filed Dec. 7, 2011, entitled “METHOD AND SYSTEM FOR ADVERTISEMENT CHOICES USING A SECOND DISPLAY DURING CONTENT PLAYBACK”, owned by the assignee of the present application and incorporated by reference herein in its entirety. A recommendation module 64 may further be employed to provide recommendations of additional content items, or advertisements, based on a user viewing history, a viewing history of affiliated users such as may be listed on a friends list, or other such factors.
Once the management server 40 has authenticated the client device in an appropriate manner, the management server may provide the content playback device 12 with a URI to access streaming or video-on-demand content from a service provider 30, generally by providing a URI to an index file via an index module 57.
The service provider 30 is illustrated with a number of components, and these components may be distributed in a number of ways, the distribution in FIG. 2 being merely one of these ways. The service provider 30 may provide its streamed or video-on-demand content by way of a content delivery network 72 which hosts files on a web server 84. Each such file typically includes an index file, which may be in one implementation in the format .m3u8, and the index file may provide a URI to a number of transport stream files 82a-82c, e.g., 01.ts, 02.ts, 03.ts, and so on.
The streamed content files may be provided to the web server in this fashion or may be created using a media encoder and segmenter module 68. The media encoder and segmenter module 68 is illustrated as being part of the service provider 30, but it will be understood that the same may be hosted entirely separately.
As shown in the figure, generally a flow starts at a source of content 20, e.g., a camcorder file or other such audiovisual file, feeding into the media encoder and segmenter module 68. A media encoder 74 encodes an incoming audiovisual media stream, e.g., live or prerecorded, into an encoded format such as MPEG2-TS. The encoded stream feeds into a segmenter module 75, which at a segmenter 76 slices the stream into one or more streams or files, e.g., which durations are arbitrary but are generally of equal length for better performance. An index file is then generated which contain URIs to the sliced streams or files. In the figure, the index file is an M3U8 file with filename extension “.m3u8”, and the same contains URIs to files with filename extension “.ts”.
When the file is generated, it may be encrypted, e.g., with AES-128 bit security with CBC and VI value 8, uploaded or placed into a web server folder as noted above where the same may be accessed and retrieved by authenticated IPTV clients.
Before an IPTV client can be provided with knowledge of the location of the files, the client is authenticated by the service manager module 66. Authenticated IPTV clients may indicate their support for streaming content and may be presented with services and/or assets as described above. When a streaming service is selected, a mixed list of both live streaming and video-on-demand audiovisual content assets may be displayed. Upon selection of an asset, the service provider and the management server will generally perform authentication for the selected service or asset as required. As will be described below, authentication may also be provided by a hosting server. For example, if a service requires a separation step of affiliating or of verifying affiliation, the affiliation may be performed along with any needed authentication of the client device. Once authenticated, the IPTV client can decrypt the encrypted .ts files and begin streaming content playback.
A flowchart 60 of one method according to the present principles is illustrated in FIG. 3. A first step is that a management server receives a login and authentication request from a content playback device (step 92). The next step is that, upon successful authentication, a streaming session is established between the two components (step 94). In this streaming session a number of aspects may be communicated, according to the principles described here. For example, the client is described to the management server, e.g., whether streaming is supported by the client. The management server may mandate a particular type of security protocol. A transport protocol may also be chosen, e.g., HTTP. It will be understood that other sorts of protocols may also be employed. The aspects communicated by the management server and content playback device will generally go beyond such basics as mere frequency of retrieval of transport stream files, what tags are involved, or the like. Generally the parameters communicated will include those pertaining to content treatment or security, e.g., AES, Shell-3, TLS1.1, link protection, encryption, hashing, keys, etc.
A next step is that the management server receives a request for a list of services (96) from the content playback device, or such may be set to be a default action. As noted, the services themselves may, when selected, lead to streaming directly. In other cases, selection of a service from the list leads to display of a corresponding set of assets provided by the service. A grid of available content may also be presented, e.g., organized by whether the content items are video-on-demand, real-time live streaming, upcoming in the future, or the like. In any case, in response to the request, the service list and optional asset list may be provided to a content playback device (step 102). A client device then requests an asset or content item, and the request is received at the server (step 104). A URI corresponding to the selected asset is provided to the client device, the URI providing a network location for retrieval of the appropriate streaming files (step 106). Advertisements or recommendations may then be sent along with the streaming files, tailored by information in the user account as described above (step 108). If the content playback device is acting in a way that indicates a malicious attack on the system, such may be determined and appropriate actions taken (step 114).
In some implementations, a proxy URI may be provided to hide the actual network location of streaming files (step 116). In other words, the URI is set to be some network location xxx.xxx.xxx.xxx, and the same is that with which the client approaches the content delivery network. The service provider or content delivery network then employs a lookup table where xxx.xxx.xxx.xxx is translated to the real content URI. That is, the information from the client is mapped to a real URI. A hacker of the client system could only obtain xxx.xxx.xxx.xxx, and with just that URI, the content delivery network will not deliver the actual URI. It will be understood that variations of the above are also possible, including where the network location xxx.xxx.xxx.xxx is replaced with a relative location within a namespace.
FIG. 3 also indicates that an initial step may be undertaken by the management server of delivering a media encoder and segmenting module to the service provider or content delivery network (step 112). In this way, prior to any requests for content being received, live streaming content may be formatted in an appropriate manner for transport to IPTV client devices.
It will be understood by one of ordinary skill in the art that not all steps described above (or in any of the flowcharts below) need be undertaken in any particular implementation, and the order of steps may vary to a certain extent as well.
FIG. 4 illustrates a flowchart 74 of a related implementation according to the principles described here. In a first step, an encoder or segmenter module is provided to a service provider or content delivery network, and content enters the media encoder system (step 118). The content may be, e.g., a live stream, or may include prerecorded content. A media encoder system encodes the stream into, e.g., an MPEG-2 TS stream (step 122). The stream is segmented into one or more streams or files. An index file is generated that contains URIs to the segmented files (step 126). The index file may be encrypted and uploaded into a web server folder (step 128).
A request for content is received from a client device (step 132). The client device is authenticated (step 134), and support for streaming is indicated (step 136). The client device receives the list of streaming services (step 138), and a service is selected (step 142). An optional asset list and selection may then occur (not shown).
Data which is provided to the content playback device generally includes a mixed list of streaming and video-on-demand content (step 144). While such display is described in greater detail below, it is noted here that the list may include prior content, now stored and provided as video-on-demand, live streaming content, as well as indications of streaming content accessible in the future. In many cases, a service provider may mandate that certain streaming assets are only available in one form or another, e.g., only available as live streaming content or only available as video-on-demand. In the same way, pricing and subscription models may differ for the respective types.
Upon selection of an asset, the management server or service provider generally performs authentication for the given service and/or asset (step 146), and upon authentication, the client is provided with the needed URI and can decrypt the encrypted .ts file and begin streaming the asset (step 148).
As noted above, a denial of service module 56 may be employed in a method of detecting malicious conduct by a client device 12, and FIGS. 5 and 6 provide an illustration of such a system 80. In FIG. 5, the management server 40 is shown in partial view with its denial of service module 56 and service manager module 66. A client device 12 is illustrated accessing the management server and service provider 30, as well as receiving content from a service provider's content delivery network 72. It will be understood that a content delivery network 72 may be associated with one or with several service providers. The description of FIG. 5 is made in conjunction with the description of the flowchart 90 of FIG. 6.
Upon presentation of a TV_ID, associated with the electronic serial number or “ESN”, by client device 12 to the service manager module 66 (step 166), a user token is generated and sent to the client device (step 168). The user token is presented to a service provider 30 (step 172) and the service provider responds by issuing the service token. After selection of a service and asset, a URI is delivered back to the client device 12 (step 174). The client device 12 then retrieves the stream from the URI, e.g., by reading the M3U8 file and obtaining stream locations therefrom (step 176). The content items are then streamed to the client (step 178).
However, certain activity by the client device 12 may be consistent with malicious activity, and the same may be flagged and counter actions taken. For example, if the client device 12 repeatedly asserts the same user token to the service provider 30, resulting in a large number of URIs being returned (step 182), such activity may be noted as suspicious by the service provider. The uniqueness of the user token allows the service provider to identify the client device as the user token includes the ESN. Besides the number of user token assertions, the management server may also note if a duplicate TV_ID has been presented (step 183). In other words, if the authentic client device were somehow hacked, its TV_ID may be stolen or counterfeit and presented again to the management server, shown in the figure as “faked” client device 12′. The management server may then note such a duplicate TV_ID and flag the same.
A number of actions may be taken. For example, a separate communication may be made by the service provider 30 to the management server 40 to assert a “get user data” call (step 184), to obtain more information about the potentially malicious user. Following this, the management server may update its own database to be alert for suspicious activity from the user account. In addition, the service provider may request that a new user token be obtained (step 188), which would require the client device to make a new request for the same from the management server. If the management server continues to see such new requests, the management server can again flag the user account, and again the perpetrators of the malicious attack can be isolated by analysis of any of the user tokens provided. As a further counteraction, if the service provider 30 suspects malicious activity, the service provider may issue a new service token (step 186), which may then also be employed for identification of a perpetrator.
After a service provider's streaming or video-on-demand content has been made available to be consumed, e.g., by being placed into web folders with an appropriate index file and transport stream files, a client content playback device, such as an IPTV, may be enabled to access, obtain, and consume the content. To provide this capability, definitions may be provided to specify streaming content as well as the client device's support for such content. It is noted that such definitions may apply to any content, and not just streaming content. It is also noted that such definitions may provide features beyond just how a client and server interacts with a piece of content. Such may also provide features on how content items are presented on the client. In such a presentation, both an asset list may be provided as well as asset information. In an asset list, it may be indicated if the content item is live or video-on-demand, and thus can be presented on the above-noted grids accordingly. Moreover, when an asset is selected, additional information may be provided to the user. Such user interface grids are discussed below in connection with FIG. 15.
The flowchart 100 of FIG. 7 illustrates one way in which streaming content may be specified. In particular, for each asset to be streamed, the service provider needs to provide at least one definition of source, protocol, and type (step 192). For example, instead of merely specifying and delivering content using a protocol such as HTTP and a particular file type, the system may provide a full system of features from the management server including use of an asset list API, asset information API, along with a protocol such as HTTPS and security such as a hash value or checksum. In this way, an existing asset specification may be integrated with streaming assets, including live streaming assets.
The service provider may then make its streaming content available to content playback devices by adding definitions to management server API responses. Exemplary such definitions are illustrated in FIGS. 9 and 10 for apiContents and apiInformation API responses. In these exemplary definitions, <source> attributes streams_types=“HTTPLS”; protocol=“https”; and metafile_types=“M3U8” are employed to identify the content as, e.g., live streaming content. In addition, the <source> value may contain the URI to an .m3u8 file. It is stressed that these particular protocols and file types are merely exemplary and that any such protocol and file type may be employed according to the requirements of the application.
In response to a request for an asset, the ability of the content playback device to support streaming may be determined, e.g., by analysis of a TV_ID (step 194). Such abilities may be specified at the asset level, which allows specification of where the content should appear in, e.g., a user interface menu, in contrast to specifying at higher levels, which allows less delineation or distinguishing of content. In the example above, in order for a client device to stream such content, the same must support the M3U8 metafile type as well as use the HTTPS protocol.
Once the service provider has determined that the client supports streaming content, the service provider returns sufficient information to allow the device to make a call to retrieve the asset (step 196). In other words, the service provider returns the correct assets list or asset. In the example above, the client makes a apiContents or apiInformation API call using HTTP to the URI of the .m3u8 file to retrieve content to be played.
FIG. 8 illustrates a more detailed flowchart 110 in which the general procedure is detailed. A first step is that a service provider makes content or assets available (step 198). In so doing, the service provider places the encoded and segmented files in an appropriate web folder (step 202). Such a web folder may be at the service provider or within a content delivery network or in some other network accessible location. The service provider then adds definitions to API responses to management server calls (step 204). Of course, the definitions may have been added as an initial matter before any content was in place or accessible. For example, the service provider may add responses to calls such as apiContents and apiInformation (step 206). In this way, the service provider identifies the content as streaming content (step 208). Specific definitions may be included as detailed above.
The client device then indicates its support for streaming content (step 212). Such may be part of the initial identification login and authentication procedure for client devices with the management server. Upon request, such as when a client makes a apiContents API call to retrieve content (step 216), an assets list may be returned (step 214). Exemplary apiContents and apiInformation API calls are illustrated in FIGS. 9 and 10, as code sections 120 and 130, respectively.
Besides defining a streaming service and a way for client devices to access and obtain streaming content, the separate hosting server may be employed to host metadata and provide security, authentication, and other functions for service providers. In this way, service providers need not build such streaming infrastructure themselves.
For example, and referring to FIG. 11, a system 150 is illustrated in which the management server 40 is again illustrated, this time in conjunction with a hosting server 282. The functionality of modules of the management server 40 are in many ways the same as disclosed above in connection with FIG. 2, and such description is not repeated. As described above, a service provider may host content itself or may provide the same through a content delivery network 268, the latter being that illustrated in the figure. A web server folder 273 includes an index file 272 which provides URIs to various transport stream files 274a-274c. In the system of FIG. 11, metadata information about content items is formatted into an ingest file and the same is ingested into a hosting server, which then hosts the metadata.
In more detail, the service provider creates an ingest file 276 which is communicated to an ingest system module 284 within the hosting server 282. The ingest system module 284 receives the metadata described in the ingest file 276 and stores the same in a storage 286 within the hosting server 282. In this way, the hosting server hosts the metadata for one or many service providers.
The hosting server may then handle authentication and security and may further return URIs to streaming content assets when requested. As described above, an authenticated IPTV client indicates its support for real-time live streaming to the service manager module and may be presented with a list of live streaming services. When a live streaming service is selected, a list of both live streaming and video-on-demand media content may be returned from the hosting server. Upon selection of an asset, a portion of the control of the user session may then be handed off to a hosting server, and the hosting server performs authentication for the service and/or asset, and once successfully authenticated, the IPTV client can apply the URI to the content delivery network, decrypt the encrypted .ts file, and begin live streaming content playback.
It will be understood that the hosting server may be merged with the management server or may form part of the content delivery network. The functions, while described separately, may be distributed or shared across various combinations of physical devices. However, keeping such functionality separate may provide benefits regarding load-balancing.
An exemplary ingest file, described in XML (other formats may be supported such as JSON, YAML, etc), is illustrated by code section 278. As may be seen, information in the ingest file 276 may include an asset ID, an asset URI, a stream type, and a metafile type. In the exemplary code section 278, the asset is a live streaming asset with stream type HTTPLS and metafile type M3U8.
A more detailed code section is illustrated by the code section 180 in FIG. 12. In this ingest file, which is also written in XML, metadata is provided about the asset such as, e.g., title, URI, the streaming protocol, the metafile type, the video type, a category name, description, duration, language, and the like. Such metadata provides not only information about the content item but also can provide information useful in formatting the presentation of the content item on a user interface (see FIG. 15) for selection by a user. Generally, the management server infrastructure would provide a service provider with instructions on how to construct the ingest file. Such instructions would include information about tags needed to identify content, e.g., security, containers, 3-D or 2-D, subtitles, and the like.
A method according to the present described principles, generally from the point of view of the hosting server, is illustrated by a flowchart 160 in FIG. 13. A first step is the reception of an ingest file from a service provider, or in some cases, from a content delivery network (step 284). The ingest file contains metadata about a streaming asset. Such ingest files may be received from service providers about all of their streaming assets, and the same are continually received as new assets are added.
For a given client device and a given asset, a next step is receiving a request from the client device, e.g., a content playback device such as an IPTV, to receive the streaming asset (step 286). This step will generally include receiving a user token from the content playback device (step 288), the user token having previously been received by the content playback device from a management server. After this initial authentication by the management server 40, service and asset lists requests may be made by the content playback device to the management server (see FIG. 11), and such lists may be returned to the content playback device 12 therefrom. Following a reception of a request for an asset, the client device accesses the hosting server, which subsequently provides authentication to ensure that the content playback device is entitled to the asset. A next step is that the hosting service provides a URI to the content playback device, the URI indicating or giving a location to an index file (step 292). Instead of an actual location, a proxy URI may also be provided as has been described.
In given implementations, various other steps may also be performed. For example, advertisements may be delivered to the content playback device, from the management server or hosting server, based on information in user accounts (step 294). Moreover, recommendations may be delivered to the content playback device based on such information in the user account, e.g., recommendations for additional related content or the like.
FIG. 14 illustrates a more detailed flowchart 170 of an exemplary method according to the principles described here. Using such methods, a service provider can indicate to the hosting server data about content items to be streamed.
A first step is that a service provider encodes and segments a content stream to be hosted and made available to content playback devices (step 298). The service provider then places such content in an accessible web folder (step 302). These steps are generally similar to those described above in connection with FIGS. 2, 4, and 8. Metadata information about the content item is formatted into an appropriate ingest file, e.g., an XML ingest file (step 304). The ingest file is then sent and received by a hosting server (step 306). The hosting server not only hosts the metadata, but handles authentication and security for client devices which desire to access content items described by the metadata (step 308).
A client device may then initiate a streaming session, indicating its support for streaming content to the management server, and in particular, through a service manager module (step 314). A client receives a list of streaming services (step 316), and from that a client selects a service (step 318). Optionally, the client may also receive a list of available assets after choosing a service (step 322). A client selects an asset, and the hosting server authenticates the client for the asset (step 324). Once authenticated, the client can receive the URI to the index file for the content item, e.g., an M3U8 file, from the hosting server. The client can then decrypt the .ts file and begin streaming.
As noted above, metadata may provide not only information about the content item but can also provide formatting information for presentation of the content item on a user interface for selection by a user. The way the ingest file is defined, i.e., by the metadata within, may provide the way in which the matrix is presented. Such a user interface is illustrated by a grid 190 in FIG. 15. In the grid 190, a grid of content items or assets for a sports channel is indicated. Current sporting events may include those watchable as live presentations 332a, as video-on-demand presentations 332b, or as mixed presentations 332c. A live presentation would be one in which a viewer would immediately be brought to a current latest streaming state. A video-on-demand presentation may include those in which a broadcast has already started, or has concluded, but for which the user wishes to view from the beginning or from some point other than a current latest streaming point. A mixed presentation may include items which may be watched as either video-on-demand or live streaming. Another column may indicate upcoming events, e.g., those to be presented as live streaming events 336a, video-on-demand events 336b, or mixed events 336c. A service provider may mandate and can indicate within the ingest file in what categories a particular content item is classified, e.g., whether the same can be only live streamed, only provided as video-on-demand, or is available as. Variations of live or video-on-demand presentations may also be provided by the system, including variations in security, containers, whether the presentation is 3-D or not, subtitles, and the like. By providing such metadata in the ingest file and to the hosting server, management and hosting server infrastructures can provide flexibility for the service provider in their choice of how they wish to provide streaming content.
Metadata information in the ingest file may also provide other information. For example, information may be provided that is necessary to layout and update a “play bar”, e.g., a start time, an end time, a duration, or the like. Of course, for a sporting event, an end time may be extended if necessary for, e.g., overtime play. Such metadata information is not just for general purposes but provides an important feature for systems and methods according to the principles described here. In particular, it provides added performance because providing such information allows the client device to start to prepare user interface elements even before assets are retrieved, e.g., even before asset content data itself is received. As asset streams are generally sophisticated and include a viewing application, middleware, drivers, codecs, and the like, additional time on a front end for preparation of such elements leads to higher viewing performance.
As noted above, systems and methods according to the principles described here provide flexibility for service providers in how they wish to provide streaming content. One way in which this is performed in certain implementations is by specifying that client devices require a certain amount of memory for streaming files, e.g., enough to store the entire video-on-demand file. In this way, and referring to FIG. 16, a management server infrastructure may allow a model that is a combination of an “append” model and a “sliding window” model. In particular, as seen in the “append” model, an index file 338 has a minimum size at time t=t0 and grows generally monotonically as a function of time t as more .ts files are added to the .m3u8 file or “playlist”. That is, as additional transport stream files “n.ts” are added, the index file must grow to describe them, i.e., to add them to the playlist. In a “sliding window” model, an index file 342 has a relatively fixed size and thus does not change appreciably in size as time t increases. In the append model, the viewer may watch live streaming and may perform trick play to, e.g., rewind to a prior point tprior<t. In a sliding window model, the viewer is generally limited to watching live streaming, as only a small “snapshot” of the playlist is provided, although rewinding to a prior streaming point is possible depending on the size of the window. In a combined model, if the infrastructure has specified that the client device reserve memory sufficient for the entire video-on-demand file, than a choice may be offered to the user as to whether they wish to watch live streaming, i.e., at the point of the windowed index file, or if they wish to watch video-on-demand, i.e., using the entire index file back to the point t=t0. Such may be contrasted with systems in which only the entire M3U8 file is offered.
FIG. 17 illustrates an architecture 210 for streaming files employing a hosting server. In some ways it bears similarity with FIG. 11, although FIG. 17 also describes token swapping and affiliation with service providers. The description of FIG. 17 is provided in conjunction with a description of a flowchart 220 of FIG. 18, which describes the corresponding method.
As seen in the figures, a client device 12 communicates with a management server 40 and a hosting server 282. Initially, the client device 12 presents and a management server 40 receives a login and authentication request including a TV_ID at a service manager module 66 which serves as a front end of the management server 40 (step 366). In response, upon a successful completion of this first authentication, a streaming session is established and a user token is provided to the client device (step 368).
As above, the management server may provide a service listing, including services accessible through the hosting server and those accessible directly. In other words, two independent systems are illustrated in the architecture 210. In one, the hosting server 282 hosts metadata from a number of service providers 356a-356d. In the second, a service provider 357 is directly contacted by the client device 12. A content delivery network 364 is generally the source of streaming content, although in some cases the same may be provided in another fashion. In either case, a list of services may be provided from the management server for selection by the client device. Alternatively, the list of services may be provided by the hosting server.
Where a hosting server is employed, the client device presents the user token to the hosting server (step 370) and in this way requests a service token from the hosting server. The hosting server provides a service token to the client (step 372). Where assets are provided upon selection of a service, the hosting server may provide such an asset list (step 374). With the service token, the client device can access services or assets appropriate for that client, e.g., those with which the client is affiliated. Upon receipt of a request for access to a service or asset (step 376), the client device is authenticated and a URI for the requested service or asset is provided to the client device (step 378); the same then requests the selected streaming content through the content delivery network (step 382).
Where a hosting server is not employed, the client device presents the user token directly to the service provider 357, and in particular to an affiliation module 358 (step 384). A service or affiliation token may be obtained from the affiliation module 358 (step 386), which then indicates an appropriate affiliation with that service provider. The issuance of the affiliation token may also be the subject of a notification to the management server 40, so that upon the next request for a user token, the affiliation may be automatically noted with the user token. In this way the client device 12 may be saved the step of re-affiliating with the service provider 357 upon the next access of the service. It is noted that the affiliation token may work on various levels, e.g., category level, asset level, or service-level. In this way, levels of service may be independently provided. For example, a service provider may choose to allow users to preview categories of free content, but once a user chooses premium content, the service provider may require appropriate affiliation. In any case, the client device presents the affiliation token and the received URI to the content delivery network (step 388), and the client thus receives the streamed asset from the content delivery network (step 392).
The hosting server described in implementations above provides a convenient way for service providers to have metadata hosted and to allow for authentication and security, and in this way saves the service provider from the task of providing their own such infrastructure. The hosting server benefits from economies of scale as the same can host metadata from a number of service providers and still provide appropriate security and authentication protocols when client devices request content. FIG. 19 illustrates an exemplary flowchart 230 of such a method. In a first step information is received about at least one content item from a first service provider (step 394). Information is then received about at least one content item from a second service provider (step 396). The information about the content items from the first and second service providers are generally provided by way of the ingest file described above. The ingest file information is stored on the hosting server from each service provider (step 398). The user of a content playback device may then send, and the hosting server may receive, a request for a content item. Upon successful authentication, the URI for the content item is provided to the client (step 404). It will be understood that such authentication may include a first authentication with the management server infrastructure to obtain a list of services and then a second authentication via the hosting server with an individual service once the service is selected by the user. It is noted that in some implementations the hosting server may provide the list of services. The client device then requests the service (or asset) using a URI provided by the hosting server, generally pointing to a location on a content delivery network. Advertisements and recommendations may then be provided to the content playback device, tailored by information in the user account (step 408).
Details of certain components will now be described.
The content playback device 12 can take many forms, and multiple content playback devices can be coupled to and selected from within a given local network. Exemplary content playback devices may include, e.g., an IPTV, a digital TV, a digital sound system, a digital entertainment system, a digital video recorder, a video disc player, a combination of these, or any number of other electronic devices addressable by a user on the local network 16 and capable of delivering an ad over the Internet. The same may also include more traditional video and audio systems that have been appropriately configured for connectivity. For the sake of simplicity, in this specification, the content playback device 12 will generally be exemplified by an IPTV, in which case the same will generally include a processor that controls a visual display and an audio renderer such as a sound processor and one or more speakers. The processor may access one or more computer-readable storage media such as but not limited to RAM-based storage, e.g., a chip implementing dynamic random access memory (DRAM), flash memory, or disk-based storage. Software code implementing present logic executable by the content playback device 12 may also be stored on various memories to undertake present principles. The processor can receive user input signals from various input devices including a second display, a remote control device, a point-and-click device such as a mouse, a keypad, etc. A TV tuner may be provided in some implementations, particularly when the content playback device 12 is an IPTV, to receive TV signals from a source such as a set-top box, satellite receiver, cable head end, terrestrial TV signal antenna, etc. Signals from the tuner are then sent to the processor for presentation on the display and sound system. A network interface such as a wired or wireless modem communicates with the processor to provide connectivity to the Internet through the local network 16. It will be understood that communications between the content playback device 12 and the Internet 26, or between the second display and the Internet, may also take place through means besides the local network 16. For example, the second display may communicate with the content playback device 12 through a separate mobile network.
The one or more second displays each bear a processor and components necessary to operate an application for service provider and content selection. In particular, the processor in the second display may access one or more computer-readable storage media such as but not limited to RAM-based storage, e.g., a chip implementing dynamic random access memory (DRAM), flash memory, or disk-based storage. Software code implementing present logic executable by the second display may also be stored on various memories to undertake present principles. The second display 14i can receive user input signals from various input devices including a point-and-click device such as a mouse, a keypad, a touch screen, a remote control, etc. A network interface such as a wired or wireless modem communicates with the processor to provide connectivity to wide area networks such as the Internet 26 as noted above.
The servers, e.g., the management server 40 and content server 22, have respective processors accessing respective computer-readable storage media which may be, without limitation, disk-based and/or solid state storage. The servers communicate with a wide area network such as the Internet 26 via respective network interfaces. The servers may mutually communicate via the Internet 26. In some implementations, two or more of the servers may be located on the same local network, in which case they may communicate with each other through the local network without accessing the Internet.
It is noted that the various modules discussed above with respect to, e.g., the servers, may be implemented in a number of ways. In some cases, module functions may overlap, or module functions may be shared between servers or between a content playback device or second display and a server. Other module functions will also be understood.
Moreover, any module described may generally be represented by one or more physical memories, and such memories are generally addressable by physical or logical addresses. Suitable computing environments may also be implemented as part of cloud architectures.
Systems and methods have been disclosed that allow improvement of the user experience of the IPTV without adding to the hardware costs of the unit. As disclosed above, users may employ the system and method to receive streamed and video-on-demand content. Systems and methods according to the principles described here provide a methodology and protocol for a service provider to specify streaming content, e.g., live streaming content, and to allow a content playback device to access, obtain, and play the same. In this way, the service provider is enabled to integrate streaming content into an existing management server ecosystem in a convenient fashion. Moreover, the systems and methods described provide specifications for IPTV devices to reliably obtain and play live streaming audiovisual content without significant, or any, modifications.
One implementation includes one or more programmable processors and corresponding computing system components to store and execute computer instructions, such as to execute the code that provides the various server functionality, e.g., that of the management server 18 or content server 22. Referring to FIG. 20, a representation of an exemplary computing environment 140 for a server, second display or other such computing devices is illustrated.
The computing environment includes a controller 218, a memory 222, storage 226, a media device 232, a user interface 238, an input/output (I/O) interface 242, and a network interface 244. The components are interconnected by a common bus 266. Alternatively, different connection configurations can be used, such as a star pattern with the controller at the center.
The controller 218 includes a programmable processor and controls the operation of the servers and their components. The controller 218 loads instructions from the memory 222 or an embedded controller memory (not shown) and executes these instructions to control the system.
Memory 222, which may include non-transitory computer-readable memory 224, stores data temporarily for use by the other components of the system. In one implementation, the memory 222 is implemented as DRAM. In other implementations, the memory 222 also includes long-term or permanent memory, such as flash memory and/or ROM.
Storage 226, which may include non-transitory computer-readable memory 228, stores data temporarily or long-term for use by other components of the servers, such as for storing data used by the system. In one implementation, the storage 226 is a hard disc drive or a solid state drive.
The media device 232, which may include non-transitory computer-readable memory 234, receives removable media and reads and/or writes data to the inserted media. In one implementation, the media device 232 is an optical disc drive or disc burner, e.g., a writable Blu-ray® disc drive 236.
The user interface 238 includes components for accepting user input, e.g., the user indications of streaming content item, and presenting service lists, asset categories, and assets to the user. In one implementation, the user interface 238 includes a keyboard, a mouse, audio speakers, and a display. The controller 218 uses input from the user to adjust the operation of the servers.
The I/O interface 242 includes one or more I/O ports to connect to corresponding I/O devices, such as external storage or supplemental devices, e.g., a printer or a PDA. In one implementation, the ports of the I/O interface 242 include ports such as: USB ports, PCMCIA ports, serial ports, and/or parallel ports. In another implementation, the I/O interface 242 includes a wireless interface for wireless communication with external devices. These I/O interfaces may be employed to connect to one or more content playback devices.
The network interface 244 allows connections with the local network and optionally with content playback device 12 and includes a wired and/or wireless network connection, such as an RJ-45 or Ethernet connection or “Wi-Fi” interface (802.11). Numerous other types of network connections will be understood to be possible, including WiMax, 3G or 4G, 802.15 protocols, 802.16 protocols, satellite, Bluetooth®, or the like.
The servers and the second displays may include additional hardware and software typical of such devices, e.g., power and operating systems, though these components are not specifically shown in the figure for simplicity. In other implementations, different configurations of the devices can be used, e.g., different bus or storage configurations or a multi-processor configuration.
Various illustrative implementations of the present invention have been described. However, one of ordinary skill in the art will recognize that additional implementations are also possible and are within the scope of the present invention. For example, while the systems and methods have been disclosed with respect to service and asset choices made by a client device, i.e., a content playback device, e.g., an IPTV, it will be understood that such service and asset choices may also be made by a second display presenting appropriate authentication credentials to a management server, as disclosed in assignee's co-pending US patent applications incorporated by reference above, owned by the assignee of the present application and herein incorporated by reference in their entireties. Moreover, while URIs have been discussed as ways to access streaming and video-on-demand content from service providers or content delivery networks, it will be understood that the URL subset of URIs will often be that which is returned to clients for access.
Accordingly, the present invention is not limited to only those implementations described above.

## Claims

1. A method for hosting assets and metadata about assets from service providers, the assets for streaming or video-on-demand, comprising:
on a hosting server, receiving a metadata file from a service provider or content delivery network, the metadata file associated with an asset in a web folder, the asset configured to be delivered in a streamed or video-on-demand fashion, the web folder including an index file and a plurality of transport stream files;
on a management server, receiving a request from a second display for a streamed or video-on-demand asset, the second display using the authentication credential of a content playback device, the second display separate from the content playback device but configured to at least partially control content playback on the content playback device;
upon authentication of the content playback device with the management server, providing a user token to the content playback device, the user token associated with the requested streamed or video-on-demand asset;
on the hosting server, receiving a request from the content playback device having authentication credentials to receive the asset, the request including the user token;
from the hosting server, providing a URI to the content playback device, the URI providing access to the index file from which the content playback device may receive the asset, the index file being accessible from the service provider or content delivery network and not from the hosting server, and wherein the providing a URI includes providing a proxy URI to the content playback device, the proxy URI convertible to an actual URI only at the service provider or content delivery network, such that the actual location of the URI file is hidden to the content playback device; and
determining if the content playback device is a faked client device presenting a stolen or counterfeit TV_ID by determining if a duplicate TV_ID has been presented; and
requiring the content playback device to request a new user token if the content playback device is determined to be a faked client device.

2. The method of claim 1, wherein the metadata file is an XML file.

3. The method of claim 1, wherein the authentication credential is associated with a user account, and further comprising delivering an advertisement to the content playback device, a choice of advertisement at least partially based on data in the user account.

4. The method of claim 1, wherein the authentication credential is associated with a user account, and further comprising delivering a recommendation of an additional content item to the content playback device, the recommendation at least partially based on data in the user account.

5. A non-transitory computer-readable medium, comprising instructions for causing a computing device to implement the method of claim 1.

6. A server system to host, authenticate, and arrange for delivery of assets to a content playback device, comprising:
an ingest module to receive a file containing metadata about a streamed or video-on-demand asset;
an authentication module to receive an authentication credential from a second display, the authentication credential of a content playback device, upon request for the streamed or video-on-demand asset, the authentication module further for receiving a user token as part of the received request, the user token provided to the content playback device from a management server upon the request for a streamed or video-on-demand asset, wherein the second display is separate from the content playback device but configured to at least partially control content playback on the content playback device;
a service or asset module for providing a URI of an index file to the content playback device, the index file corresponding to the asset, the URI allowing the content playback device to access the index file from a service provider or content delivery network and not from the host server system;
a proxy module, the proxy module communicating with the service or asset module to provide a proxy URI to the content playback device, the proxy URI convertible to an actual URI only by the service provider or content delivery network when received from the content playback device; and
a denial-of-service module for determining if the content playback device is a faked client device presenting a stolen or counterfeit TV_ID, wherein the denial-of-service module determines if the content playback device is a faked client device by determining if a duplicate TV_ID has been presented, wherein the denial-of-service module requires the content playback device to request a new user token if the content playback device is determined to be a faked client device.

7. The system of claim 6, further comprising an advertising module, the advertising module for providing advertising to the content playback device at least partially based on data associated with a user account associated with the content playback device.

8. The system of claim 6, further comprising a recommendation module, the recommendation module for providing recommendations of content items to the content playback device at least partially based on data associated with a user account associated with the content playback device.

9. A method of ingesting metadata about content items from at least two service providers, comprising:
receiving information about at least one content item from a first service provider at a hosting server, the information including a metafile type, the content item for video-on-demand or for streaming;
receiving information about at least one content item from a second service provider at the hosting server, the information including a metafile type, the content item for video-on-demand or for streaming;
storing the information from the first and second service providers on the hosting server;
receiving a request for a content item from a content playback device, the request received at the hosting server, the request being received from a second display associated with a content playback device, the request using the authentication credential of the content playback device, wherein the second display is separate from the content playback device but configured to at least partially control content playback on the content playback device;
determining if the content playback device is a faked content playback device presenting a stolen or counterfeit TV_ID by determining if a duplicate TV_ID has been presented, and requiring the content playback device to request a new user token if the content playback device is determined to be a faked content playback device;
upon successful authentication of the content playback device, providing a URI from the hosting server to the requesting content playback device, the URI corresponding to a network location of an index file associated with the content item, the network location not that of the hosting server, wherein the receiving a request includes receiving a user token from the content playback device, the user token having been provided to the content playback device by a management server upon authentication, and wherein the providing a URI includes providing a proxy URI to the content playback device, the proxy URI convertible to an actual URI only at the first or second service provider, such that the actual location of a URI file is hidden to the content playback device.

10. The method of claim 9, wherein the metafile is an XML file.

11. The method of claim 9, wherein the authentication credential is associated with a user account, and further comprising delivering an advertisement to the content playback device, a choice of advertisement at least partially based on data in the user account.

12. The method of claim 9, wherein the authentication credential is associated with a user account, and further comprising delivering a recommendation of an additional content item to the content playback device, the recommendation at least partially based on data in the user account.

13. A non-transitory computer-readable medium, comprising instructions for causing a computing device to implement the method of claim 9.