A method implemented by a network element,NE, configured as a streaming client, the method comprising: obtaining, via a processor of the NE, a first authorization token for accessing a first media segment located on a content server; embedding, via the processor, the first authorization token in a first content request message for accessing the first media segment located on the content server; sending, via a transmitter of the NE to the content server, the first content request message comprising the first authorization token to request the first media segment; receiving, via a receiver of the NE from the content server, the first media segment when the first authorization token is valid for accessing the first media segment located on the content server; sending, via the transmitter to an authentication server, an authentication request message requesting authentication of the streaming client; and receiving, via the receiver from the authentication server, an authentication response message comprising an authentication token before obtaining the first authorization token and a media presentation descriptor associated with the first media segment after receiving the authentication response message, wherein the MPD comprises a first query indicating that substitution of a segment token parameter is required when accessing the first media segment, and wherein embedding the first authorization token in the first content request message comprises: substituting the first authorization token into the segment token parameter; and embedding the segment token parameter comprising the first authorization token in the first content request message, wherein the MPD further comprises an authentication and authorization, AA, system identifier, ID, and a second query indicating that substitution of an AA system ID parameter is required when accessing the first media segment, and wherein the method further comprises: substituting the AA system ID into the AA system ID parameter; and embedding the AA system ID parameter in the first content request message before sending the first content request message. obtaining, via a processor of the NE, a first authorization token for accessing a first media segment located on a content server; embedding, via the processor, the first authorization token in a first content request message for accessing the first media segment located on the content server; sending, via a transmitter of the NE to the content server, the first content request message comprising the first authorization token to request the first media segment; receiving, via a receiver of the NE from the content server, the first media segment when the first authorization token is valid for accessing the first media segment located on the content server; sending, via the transmitter to an authentication server, an authentication request message requesting authentication of the streaming client; and receiving, via the receiver from the authentication server, an authentication response message comprising an authentication token before obtaining the first authorization token and a media presentation descriptor associated with the first media segment after receiving the authentication response message, wherein the MPD comprises a first query indicating that substitution of a segment token parameter is required when accessing the first media segment, and wherein embedding the first authorization token in the first content request message comprises: substituting the first authorization token into the segment token parameter; and embedding the segment token parameter comprising the first authorization token in the first content request message, wherein the MPD further comprises an authentication and authorization, AA, system identifier, ID, and a second query indicating that substitution of an AA system ID parameter is required when accessing the first media segment, and wherein the method further comprises: substituting the AA system ID into the AA system ID parameter; and embedding the AA system ID parameter in the first content request message before sending the first content request message. substituting the first authorization token into the segment token parameter; and embedding the segment token parameter comprising the first authorization token in the first content request message, wherein the MPD further comprises an authentication and authorization, AA, system identifier, ID, and a second query indicating that substitution of an AA system ID parameter is required when accessing the first media segment, and wherein the method further comprises: substituting the AA system ID into the AA system ID parameter; and embedding the AA system ID parameter in the first content request message before sending the first content request message. substituting the AA system ID into the AA system ID parameter; and embedding the AA system ID parameter in the first content request message before sending the first content request message.