公开(公告)号：US09323916B1

公开(公告)日：2016-04-26

申请号：US13766822

申请日：2013-02-14

Applicant: Google Inc.

Inventor： Huahui Wu ,  Nicolas Catania ,  Curtis Gerald Condra

IPC: G06F21/44 ,  H04L29/06 ,  G06F21/62

CPC classification number: H04L63/08 ,  G06F21/10 ,  G06F21/335 ,  G06F21/44 ,  G06F21/6218 ,  H04L63/0807 ,  H04L63/102 ,  H04L63/126

Abstract: Described is a process for securely authorizing access to media content from a first device to a second device. Access to content may be authorized by performing authentication from the first device. Information used for authentication (e.g. login information) is not shared with the second device. Instead, a token may be used to authenticate the second device. The authorization process may be done in a secure manner by sharing only the generated token with the second device. Authentication information may not be derived from the token, and accordingly, even if the second device is not secure or the token is exposed, authentication information remains secure.

Abstract translation: 描述了用于安全授权从第一设备到第二设备访问媒体内容的过程。 可以通过从第一设备执行认证来授权对内容的访问。 用于认证的信息（例如登录信息）不与第二设备共享。 相反，可以使用令牌来认证第二设备。 授权过程可以通过仅将生成的令牌与第二设备共享来以安全的方式完成。 认证信息可能不会从令牌中导出，因此即使第二设备不安全或令牌被暴露，认证信息仍然是安全的。

公开(公告)号：US09736140B1

公开(公告)日：2017-08-15

申请号：US15137697

申请日：2016-04-25

Applicant: Google Inc.

Inventor： Huahui Wu ,  Nicolas Catania ,  Curtis Gerald Condra

IPC: H04L29/06 ,  G06F21/44 ,  G06F21/62

CPC classification number: H04L63/08 ,  G06F21/10 ,  G06F21/335 ,  G06F21/44 ,  G06F21/6218 ,  H04L63/0807 ,  H04L63/102 ,  H04L63/126

Abstract: Described is a process for securely authorizing access to media content from a first device to a second device. Access to content may be authorized by performing authentication from the first device. Information used for authentication (e.g. login information) is not shared with the second device. Instead, a token may be used to authenticate the second device. The authorization process may be done in a secure manner by sharing only the generated token with the second device. Authentication information may not be derived from the token, and accordingly, even if the second device is not secure or the token is exposed, authentication information remains secure.