公开(公告)号：US11528301B1

公开(公告)日：2022-12-13

申请号：US16917560

申请日：2020-06-30

Applicant: Amazon Technologies, Inc.

Inventor： Rahul Kishore Saraf ,  Prasad Renake ,  Joseph Jabril Hooper ,  Prabhu Shanmukham Ganesh ,  Vinothkumar Narasimhan

IPC: H04L9/40 ,  G06F21/62 ,  H04L65/60 ,  H04L67/02

Abstract: Disclosed are system architectures and techniques for securely embedding private content via dynamically-set security policy. A streaming service stores associations of particular streaming content with security policies that each specify domains allowed to initiate streaming from the streaming service. Requests for the streaming content are received from user-agents. The streaming service identifies respective security policies associated with each of the streaming content indicated by each of the requests and dynamically sets each security policy in a response. The responses are transmitted back to the user-agent where the security policy is enforced. In some instances, the streaming service is an application streaming service that hosts respective applications for different entities for streaming application content, and the security policies specify domains allowed to initiate application streaming from the application streaming service for the corresponding hosted application. A configuration interface for configuring the permitted domains and other features is also disclosed.

公开(公告)号：US11076002B1

公开(公告)日：2021-07-27

申请号：US16908289

申请日：2020-06-22

Applicant: Amazon Technologies, Inc.

Inventor： Rahul Kishore Saraf ,  Joseph Jabril Hooper ,  Prasad Renake ,  Vinothkumar Narasimhan ,  Murali Rathinasamy ,  Zishen Hu ,  Naveen Mahadevaiah

IPC: H04L29/08 ,  H04L9/06 ,  H04L29/06 ,  H04L29/12

Abstract: A first subdomain name may be generated based at least in part on first session parameters associated with a first streaming session. A first subdomain of a domain may be formed, wherein the first subdomain has the first subdomain name. A first authorization cookie for the first streaming session may be stored at the first subdomain. A second subdomain name may be generated based at least in part on the second session parameters associated with a second streaming session. A second subdomain of the same domain may be formed, wherein the second subdomain has the second subdomain name. A second authorization cookie for the second streaming session may be stored at the second subdomain.