CN109952570A - Media asset access control system - Google Patents

Media asset access control system Download PDF

Info

Publication number
CN109952570A
CN109952570A CN201780064128.6A CN201780064128A CN109952570A CN 109952570 A CN109952570 A CN 109952570A CN 201780064128 A CN201780064128 A CN 201780064128A CN 109952570 A CN109952570 A CN 109952570A
Authority
CN
China
Prior art keywords
asset
media object
title
license
asset name
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201780064128.6A
Other languages
Chinese (zh)
Other versions
CN109952570B (en
Inventor
本杰明·阿尔都比·施瓦茨
杰里迈亚·邓纳姆
安德鲁·图纳尔
杰森·拉皮尔
达斯汀·埃塞列夫斯基
贾斯廷·亚伯拉姆
赫瓦贾·沙姆斯
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Amazon Technologies Inc
Original Assignee
Amazon Technologies Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US15/275,082 external-priority patent/US10592546B2/en
Priority claimed from US15/275,020 external-priority patent/US10346458B2/en
Application filed by Amazon Technologies Inc filed Critical Amazon Technologies Inc
Priority to CN202410325889.4A priority Critical patent/CN118133347A/en
Publication of CN109952570A publication Critical patent/CN109952570A/en
Application granted granted Critical
Publication of CN109952570B publication Critical patent/CN109952570B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/62Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/90Details of database functions independent of the retrieved data types
    • G06F16/903Querying
    • G06F16/90335Query processing
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/40Information retrieval; Database structures therefor; File system structures therefor of multimedia data, e.g. slideshows comprising image and additional audio data
    • G06F16/41Indexing; Data structures therefor; Storage structures
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/40Information retrieval; Database structures therefor; File system structures therefor of multimedia data, e.g. slideshows comprising image and additional audio data
    • G06F16/43Querying
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/40Information retrieval; Database structures therefor; File system structures therefor of multimedia data, e.g. slideshows comprising image and additional audio data
    • G06F16/48Retrieval characterised by using metadata, e.g. metadata not derived from the content or metadata generated manually
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/06Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
    • H04L9/0643Hash functions, e.g. MD5, SHA, HMAC or f9 MAC

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Databases & Information Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Data Mining & Analysis (AREA)
  • Multimedia (AREA)
  • Software Systems (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Library & Information Science (AREA)
  • Power Engineering (AREA)
  • Computational Linguistics (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Computer Hardware Design (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
  • Storage Device Security (AREA)

Abstract

There is provided herein a kind of asset store servers, associated documents are distributed to asset name and distribution license to asset name by it, and the associated documents with uncorrelated title is allowed to be assigned the license for permitting that each file is separately provided without user independently of file naming convention.The asset store server can also generate the revision of raw filename and is indexed based on the version of modification to distributed objects memory block, so that the associated documents with related names are not listed in the same subregion of distributed objects memory block.The data retrieval waiting time can be reduced by being indexed based on the revision of raw filename to distributed objects memory block.

Description

Media asset access control system
Background technique
In general, various files are stored in catalogue, file and sub-folder by file system.Internet access file system User can read, be written, deleting or otherwise managing this class file.In certain cases, it may be desirable to can be One or more file setting licenses.For example, multiple accessible identical file system of user.First user may create The other users built the first file, and may want to Internet access file system cannot read, be written or delete the first text Part.Therefore, the attribute of accessible first file of the first user and license appropriate is set.
Detailed description of the invention
Through all diagrams, Ref. No. may be reused to indicate the corresponding relationship between reference element.It provides attached Figure is to illustrate example embodiment described herein, and attached drawing is not intended to be limited to the scope of the present disclosure.
Fig. 1 is the block diagram of asset store environment 100 according to an embodiment.
Fig. 2 illustrates the exemplary table searched in key database for being stored in Fig. 1 according to an embodiment
Fig. 3 illustrates the exemplary table in the assets permission database for being stored in Fig. 1 according to an embodiment
Fig. 4 is the block diagram of the asset store environment of Fig. 1 according to an embodiment, is illustrated by asset store environment The operation for the managed data object that component executes.
Fig. 5 is the block diagram of the asset store environment of Fig. 1 according to an embodiment, is illustrated by asset store environment What component executed allows to access the operation of data object.
Fig. 6 is flow chart according to an embodiment, is depicted for distributing by asset store server illustratively The routine of the data object license of realization.
Fig. 7 is flow chart according to an embodiment, is depicted for generating by asset store server illustratively The routine of the data object title of the modification of realization.
Specific embodiment
Permitted to can permit certain user's access file and other users is forbidden to access as described above, file can be set in user The file.In some cases, a group of file is relevant.For example, media player can export media (for example, film, TV programme, music video etc.) digital copies.However, the digital copies of media may include sequentially being accessed to export The various files of media.Since file is relevant, it is thus possible to it is desirable that the file license having the same of all associated documents.
Distributed objects memory block can store the road that identification file (for example, data object) is stored in the position on disk Diameter.Specifically, distributed objects memory block can store the path of multiple groups associated documents.In distributed objects memory block, It can be relevant by file identification based on filename.For example, first group of associated documents can be named as " movie1file1 ", " movie1file2 ", movie1file3 " etc. and second group of associated documents can be named as " movie2file1 ", " movie2file2 ", movie2file3 " etc..When associated documents have related names, the file license of associated documents is changed It may be relatively easy.For example, batch operation can be run to change in filename and there is same prefix (for example, " movie1* ") All Files license.
But if associated documents do not have related names, it may be difficult and/or expensive for changing file.Example Such as, if associated documents have incoherent title, possibly the batch operation for capturing all associated documents can not be defined.Management Member must may parse manually the file of storage, it is related which file be identified, and the license of each associated documents is separately provided.Such as The quantity of fruit associated documents is thousands of, hundreds of thousands of, millions of etc., then this may be especially tediously long.If missing out associated documents (for example, by change associated documents file permit operation, by administrator etc.), then this may damage file security, because The associated documents missed may be accessed for unauthorized user.In addition, if associated documents have incoherent title, then High-level language strategy may be unable to run, such as " All Files relevant to this particular media asset should not can to any user Read " or " all 1080p reproduction of any media asset should be readable to each user on January 1st, 2016."
In addition, if associated documents have related names, then it is possible that accessory problem.For example, distributed objects are deposited Storage area can have multiple subregions and is indexed using filename.Index can be based on the son with root node, various ranks The tree construction of node and leaf node, each leaf node indicates the subregion of distributed objects memory block, so that first of filename Character determines file is assigned to which child node of root node, and second character of filename determines that file is distributed Which child node of child node, and so on, until assigning files to leaf node (for example, point of distributed objects memory block Area).In other words, with related names file can be listed in together in the same subregion of distributed objects memory block (for example, File " movie1file2 " is listed in same subregion with file " movie1file1 ", and file " game1file1 " can arrange Out in another subregion of distributed objects memory block).User equipment can be with Querying Distributed object memory block to identify use Family equipment attempts the position for the various files retrieved.In general, user equipment attempt in extremely rapid succession to retrieve associated documents (for example, Because user is watching film).Because filename can be used to be indexed distributed objects memory block, and because use Family equipment attempts to retrieve the associated documents with related names, so user equipment may be try to store from distributed objects The same subregion in area reads and/or is written to.Therefore, there may be readings between the subregion of distributed objects memory block And/or the uneven distribution of write-in flow, become performance bottleneck so as to cause distributed objects memory block.
Therefore, this document describes a kind of asset store server, associated documents are distributed to asset name and distributed by (1) It is licensed to asset name, the associated documents with uncorrelated title is allowed to be assigned license independently of file naming convention The license of each file is separately provided without user;And/or the revision of (2) based on given filename is to distributed right As memory block is indexed, so that the unlisted same subregion in distributed objects memory block of associated documents with related names In.For example, when asset owner provides a store for one group of associated documents in asset database, asset store server It can permit asset owner and create the asset name for defining associated documents (for example, if associated documents are provided for playing film Produce the title that title may be film).Associated documents can be mapped to asset name and deposit mapping by asset store server Storage is in assets permission database.
In addition, asset store server can permit asset owner as asset name distribution license, and asset store The license distributed can be stored in assets permission database by server.Therefore, when user asks from asset retrieval server When seeking a file, asset retrieval server can (1) queries asset permission database to identify the money for being mapped to the file Produce title;(2) determine whether user is authorized to the file using the asset name of identification;(3) if user is awarded Power accesses the file, then the position of the file is determined by Querying Distributed object memory block;(4) from determining position Retrieve the file;And the file is transferred to user to meet request by (5).
In addition, asset store server can generate hash for each associated documents.For example, hash can be based on corresponding phase Close the file path of file.The hash of generation can be used as the filename that prefix is attached to corresponding associated documents.Even if related text Part can have related names and/or can store in similar position, and the hashed value generated for associated documents can be different (for example, the first character of the hashed value of first associated documents can be with first of the hashed value of second associated documents Character is different).Therefore, because being indexed by tree construction to distributed objects memory block, it is possible to by associated documents It is divided into different subregions.This can reduce continuous reading and/or write request is sent to distributed objects memory block A possibility that identical partitions.Therefore, it is possible to reduce distributed objects storage area data retrieves the waiting time.Extremely below with reference to Fig. 1 Fig. 7 describes the additional detail of asset store server.
Example asset storage environment
Fig. 1 is the block diagram of asset store environment 100 according to an embodiment.As shown in fig. 1, asset store environment 100 include end user device 102, asset owner's equipment 104, asset store server 106, asset retrieval server 108, Asset database 144 searches key database 146 and assets permission database 148.In embodiments, terminal user sets Standby 102 communicate via network 110 with asset retrieval server 108.In addition, asset owner's equipment 104 can be via network 110 It is communicated with asset store server 106.Network 110 can be the public addressable network of linked network, may be by various differences Side's operation, such as internet.In other embodiments, network 110 may include dedicated network, personal area network, local area network, Wide area network, cable system, satellite network, cellular phone network etc. or combinations thereof, each accessible internet and/or from mutual Networking accesses.
Asset database 144 can store data object (for example, file) relevant to various different contents, such as electric Shadow, TV programme, music video, audio books and/or the like.In addition, asset database 144 can store identical content Different editions.For example, asset database can store the content (for example, 480i, 720p, 1080p, 4K etc.), no of different-format With the content (for example, English, French, Spanish etc.) of language, the content with additional feature is (for example, director's comment, delete Scene etc.) and/or the like.Data object can store in various files or catalogue in asset database 144.So And as described herein, the physical location in the asset database 144 of storing data object may not be influenced to distributing to data pair The application of the modification of the license of elephant.Asset database 144 can have several accumulation layers, for example, primary storage, archive storage and/or It is such.Primary storage can be provided than being stored in the archive faster retrieval time, and therefore providing and safeguard may be than depositing It stores up more expensive.
Content may be not stored in individual data object.But content can store in multiple data objects, each Data object represents the small time slice of entire content.Multiple data objects can be accessed continuously to export content.Therefore, Multiple data objects can be relevant.It can be to asset store service via the asset owner of asset owner's equipment 104 Device 106 indicates that multiple associated data objects are being transferred to asset database 144 just to be stored.For example, can be via assets Multiple associated data objects are transferred to assets by storage server 106, asset retrieval server 108 or another system (not shown) Database 144 is to be stored.Asset owner's equipment 104 also can indicate that multiple associated data objects should be with which assets Or sub- assets are associated.As it is used herein, assets can refer to specific content title (for example, film, TV programme, music Video, audio books etc.), and the sub- assets particular version that can refer to assets or format are (for example, the content of 1080p format, French Content, can pass through the particular dispenseds channel such as TV, internet and cellular network distribute content) or assets different reproduction (for example, a collection TV programme).
Asset store server 106 may include data object to the mapper 122 of assets, assets permit manager 124, Search key generator 126 and asset storage management device 128.The mapper 122 of data object to assets can be configured as Data object is mapped to assets or sub- asset name.For example, the mapper 122 of data object to assets can be all from assets Person's equipment 104 receives indicated assets or sub- asset name, and generates assets or sub- asset name arrives associated data object Each mapping.Then, the mapper 122 of data object to assets can be by mapping storage in assets permission database 148.
In addition, asset owner's equipment 104 can indicate the license of assets to be distributed to or sub- asset name.For example, being permitted It can may include read access, write-access, update access, delete access, update metadata access (for example, modification data pair The authorization of the attribute of elephant, such as format, bit rate, keyword, association performer, date created, shooting date etc.) and/or it is all As such, and it is associated with license to can specify which terminal user.As an example, terminal user, which can be, has been awarded visit Ask the user (for example, licensee, consumer, right holder etc.) of the license of certain data objects for Gong checking.Certain In embodiment, multiple licenses can be distributed for assets or sub- asset name.For example, first terminal user can be authorized to being mapped to The read access of the data object of assets or sub- asset name, and second terminal user can be authorized to being mapped to assets or son The data object of asset name reads and writees access.Assets permit manager 124 can receive by asset owner's equipment The license of 104 instructions, and license is mapped to indicated assets or sub- asset name.Then, assets permit manager 124 can With by mapping storage in assets permission database 148.Therefore, assets permission database 148 can store assets or sub- assets The mapping that mapping and assets or sub- asset name of the title to multiple data objects are permitted to one or more.Assets license count It will be more fully described below with reference to Fig. 3 according to the content in library 148.
Optionally, asset owner's equipment 104 can not indicate distribute to the license of assets or sub- asset name.? In this case, default license is distributed to assets or sub- asset name by assets permit manager 124, and default license is arrived The mapping storage of assets or sub- asset name is in assets permission database 148.
Assets permit manager 124 can be configured to that assets will be applied permissions in response to received request Or sub- asset name.For example, asset owner's equipment 104 can transmit addition or modify one or more asset names or son money Produce the request (for example, Application Programming Interface (API) is called) of the license of title.The request can identify one or more assets Or sub- asset name, and including the information newly permitted is described in detail.Identified one can be used in assets permit manager 124 Or multiple assets or sub- asset name and License Info modify the one or more moneys being stored in assets permission database 148 It produces or the license of sub- asset name is (for example, more new assets are to the mapping permitted and by the mapping storage of update in assets license count According in library 148).
Optionally, the request for adding or modifying the license of one or more asset names or sub- asset name includes time ginseng Number.Using time parameter, asset owner can specify the date and/or time of License Expiration.When requested License Expiration, The license of assets or sub- asset name can revert to previous license, can be changed to default license, or license may not Re-map assets or sub- asset name.
Assets permit manager 124 can be with automatic running application license selection assets or the rule of sub- asset name.Example Such as, rule can be defined on event occur when or setting time (for example, periodically) execute movement (for example, addition or Modify the license of assets or sub- asset name).Rule can the title based on assets or sub- assets (for example, asset owner sets Standby 104 titles provided) it is applied to assets or sub- assets.In addition, rule can be applied to data object, or it is mapped to phase The data object of different assets or sub- asset name is either mapped to the data object of assets or sub- asset name.For example, Rule can the format (for example, resolution ratio, file size, bit rate, playout length etc.) based on data object be applied to data Object.Event may include that the introducing of new assets or sub- asset name, existing license expire, are stored in asset database 144 In addition, modification and/or the deletion of one or more data objects and/or the like.The execution of rule can cause to provide The more new assets of permit manager 124 or sub- asset name is produced to permit to the mapping of license and by the mapping storage of update in assets In database 148.
The title and data object that lookup key database 146 can store data object are in asset database 144 Mapping between storage location.As described above, distributed objects memory block can have multiple subregions and use data object name Title is indexed.As shown in fig. 1, searching key database 146 is distributed objects memory block.Therefore, key data is searched Library 146 can have multiple subregions, and is indexed using the title for the data object being stored in asset database 144. The given associated data object with related names may cause above-mentioned performance bottleneck problem, and searching key generator 126 can be with The data object title of modification is generated, the data object title leads to different name prefixes and create initially to be owned by assets Mapping between the data object title of data object title and modification that person provides.Therefore, for asset owner, data pair The title of elephant remains unchanged.However, searching key database 146 instead based on change for the purpose for searching key database 146 The modification data object title of change and be indexed.
For example, searching key generator 126 can be configured as to be stored in each data pair in asset database 144 It is hashed as generating.Any known technology (such as SHA-256) can be used and generate hash.Searching key generator 126 can make With at least part of the file path of respective data object (for example, the position of the data object in identification asset database 144 Data object file path, including asset name, sub- asset name, data object title, file, sub-folder, son Catalogue, catalogue, subregion etc.) it is hashed to determine.Once generating hash, searching key generator 126 can dissipating generation Column are attached to the original title for the data object that asset owner provides as prefix, to form the data object title of modification. For example, if the hash that data object is named as the file path of " movie1file1 " and data object is " 7HG9 ", that The data object title of modification may be " 7HG9movie1file1 ".Even if associated data object may have related names And/or can store the similar position in asset database 144, the hashed value generated for associated data object can be difference (for example, the first character of the hashed value of first associated data object can be with the hash of second associated data object The first character of value is different).Indeed, it is possible to hashed value be generated, so that conflict is (for example, two continuous or nearly singular integral The read requests that (for example, request in mutual 2 requests) carries out same subregion) greatly reduce.Therefore, because searching close Key database 146 is by tree structured index, it is possible to which the data object title based on modification draws associated data object It assigns in different subregions.This can reduce asset retrieval server 108 or another equipment will continuously be read and/or write request A possibility that being sent to the same subregion for searching key database 146.Therefore, it is possible to reduce search 146 data of key database Retrieve the waiting time.
Optionally, searching key generator 126 can be used the data object title that other technologies generate modification.For example, Instead of generating hashed value and hashed value being attached to original data object title, lookup key generator 126 can overturn original The sequence of character in data object title.As another example, lookup key generator 126, which can be generated, is not based on data pair The unique identifier of the file path of elephant, and original data object title is replaced with unique identifier.As another example, it searches Generator 126 can randomly resequence (for example, for each data pair to the character in original data object title As being randomly determined rearrangement), and use the character of rearrangement as the data object title of modification.Key is searched to generate The other technologies that do not describe can be used to generate the data object title of modification as follows in device 126: so that having correlation The associated data object of data object title has difference early enough in the title of modification, so that searching key database The lookup of these associated data objects is randomized between the different subregions for searching key database 146 in 146.
Searching key generator 126 can be by the mapping between original data object title and the data object title of modification It is stored in the table searched in key database 146.Searching key generator 126 can also be by the position with corresponding data object The data object title of relevant modification generated, which is stored in, searches in key database 146, so that being repaired using generated The data object title changed come to search key database 146 be indexed.
Can based on the data object title of modification generated come to search key database 146 be indexed when, Index can be transparent to the user.For example, the generation of the data object title of modification may not influence asset owner's Data object naming convention.The title that asset owner's selection can be used in asset owner continues for data object to be stored in money It produces in file, sub-folder, catalogue in database 144 etc..The use of the data object title of modification can not change text The tissue and storage mode of part structure or data object in asset database 144.But it is requested when from asset database 144 When data object, which subregion that the data object title of modification can only control lookup key database 146 is accessed.Below The illustrated examples of lookup key database 146 are described with reference to Fig. 2.
Asset storage management device 128, which can be configured as, to be stored in asset database 144 from asset owner's equipment 104 Received data object.Asset storage management device 128 can be configured to the number being stored in asset database 144 Batch operation is executed according to object.For example, asset owner's equipment 104 can transmit asking for assets or sub- asset name list It asks (for example, API Calls), the assets or sub- asset name are mapped to specific end user and have license access (for example, reading Take, be written, update) data object.Asset storage management device 128 can to 148 queries asset of assets permission database or Sub- asset name list, and list is transmitted to asset owner's equipment 104 to show and/or store.Optionally, assets Permit manager 124 can retrieve list and send it to asset owner's equipment 104.As another example, asset store Manager 128 can receive the data object that will be mapped to assets or sub- asset name from one from asset owner's equipment 104 Accumulation layer is moved to the request (for example, API Calls) of another accumulation layer.In response to the request, asset storage management device 128 Can be with queries asset permission database 148 to identify the data object for being mapped to assets or sub- asset name, key is searched in inquiry Database 146 retrieves being known for the designated position in asset database 144 with the position of the identified data object of identification Other data object, and the data object identified is stored in again in the new accumulation layer of asset database 144.
As described above, associated data object can store in asset database 144 same file folder or catalogue in.But It is using the license mapping of assets described herein or sub- asset name to be different from that user is allowed to modify file license (then Applied to all data objects in file) conventional system because be stored in same file folder in associated data object Usually require different access authority.As illustrated examples, the file in asset database 144 be can store and the first money Produce relevant first data object and the second data object relevant to the first assets.First data object can be the first assets 720p version and the second data object can be the 1080p versions of the first assets.It can distribute and be permitted to first terminal user Can, the license authorizes first terminal user to the read access of the 720p and 1080p version of the first assets.It can be for second eventually End subscriber distribution license, the license are authorized second terminal user and are visited the reading of the 720p version of the first assets and other assets It asks, but the not access to the 1080p version of any access.It is realized in no asset store server 106 described herein In the case where technology, batch operation possibly can not be run in the above described manner to distribute to first terminal user and second terminal user License.Appended document folder may must be created with further subdivided data object, as needed for creation appended document folder or catalogue The additional position for reading and writing request and the expected data object as identifying given appended document folder or catalogue needed for The additional queries time and cause asset database 144 retrieve the waiting time increase.It is serviced by asset store described herein The technology that device 106 is realized can reduce the proliferation of file, to reduce the retrieval waiting time of asset database 144 and allow Run the ability of batch operation as described herein.
End user device 102 can request access to one or more data objects via asset retrieval server 108.Example Such as, end user device 102 can transmit the request of the first data object of access (for example, API to asset retrieval server 108 It calls).The request can indicate whether requested access is read access, write-access, update access, deletion accesses, Update metadata access and/or the like.Asset retrieval server 108 can be with queries asset permission database 148 to identify It is mapped to the assets or sub- assets of the first data object.Once it is determined that the assets or sub- assets of mapping, asset retrieval server 108 can queries asset permission database 148 to determine associated with end user device 102 user (or terminal user Equipment 102 itself) whether have in a manner of requested the assets of access map or sub- assets license.
If the user or end user device 102 do not have the license of access assets or sub- assets, asset retrieval Server 108 can send the notice of instruction denied access to end user device 102.Otherwise, if the user or terminal User equipment 102 has the license of access assets or sub- assets really, then asset retrieval server 108 can inquire lookup key Database 146 is to identify the position of the first data object in asset database 144.For example, asset retrieval server 108 can be with The table in key database 146 is searched in inquiry first, and original data object title is mapped to the data object of modification by the table Title, to identify the data object title of modification corresponding with the title of the first data object.Then, asset retrieval server Key database 146 is searched in the 108 data object name queries that modification can be used, to identify the file road of the first data object Diameter.Optionally, the inquiry of asset retrieval server 108 can make to search the identification of key database 146 and the first data object name Claim the data object title (for example, being stored in the table searched in key database 146) of corresponding modification and to assets The response of retrieval server 108 file path corresponding with the data object title of modification.
Using the received file path of institute, asset retrieval server 108 can retrieve the first number from asset database 144 End user device 102 is transferred to according to object, and by the first data object to meet request.Asset retrieval server 108 can be with This process is repeated to any amount of requested data object and any amount of end user device 102.
End user device 102 and asset owner's equipment 104 may include various calculating equipment, including individual Calculate equipment, terminal calculates equipment, lap-top computing devices, tablet computing device, electronic reader devices, mobile device (example Such as, mobile phone, media player, portable game equipment etc.), with network access and program executive capability wearable device (for example, " smartwatch " or " intelligent glasses "), wireless device, game console, entertainment systems, there is network to visit at set-top box It asks and the TV of program executive capability (for example, " smart television ") and various other electronic equipments and device.Each terminal is used Family equipment 102, which can execute, allows user request the browser application of certain data objects or only from asset retrieval server 108 Vertical application.Similarly, asset owner's equipment 104, which can execute, allows asset owner to add or modify license and/or management The browser application or independent utility of the storage of data object.
Asset store server 106 can be programmed or be otherwise configured to manage as described herein license and The computing system of data object storage.Asset store server 106 can be according to request, when event occurs, in data object When storing in asset database 144, when storing the data object in asset database 144 and being modified and/or its is any Automatically license is added or changed when combination.
The asset store server 106 and/or asset retrieval server 108 of Fig. 1 can be single calculating equipment, Huo Zheke To include logically or physically being grouped together multiple and different calculating equipment to operate collectively as server system, Such as computer server.The component of asset store server 106 and/or asset retrieval server 108 can be realized respectively Not needing software in the hardware (for example, server computing device with one or more ASIC) of application specific, or It is embodied as the combination of hardware and software.In addition, the module and group of asset store server 106 and/or asset retrieval server 108 Part can combine on a server computing device, or the group for individually separating or being divided on several server computing devices. In some embodiments, asset store server 106 and/or asset retrieval server 108 may include than shown in Fig. 1 More or fewer components.
In some embodiments, asset store server 106 and/or asset retrieval server 108 provide feature and Service can be implemented as via the consumable network service of communication network 110.In a further embodiment, asset store takes Business device 106 and/or asset retrieval server 108 are provided by calculating the one or more virtual machines realized in environment in trustship.Support Pipe calculates the computing resource that environment may include one or more fast supplies and release, and the computing resource may include meter Calculate, network and/or store equipment.Trustship calculates environment and is referred to as cloud computing environment.
Asset database 144, lookup key database 146 and/or assets permission database 148 can be located at asset store The outside of server 106 and/or asset retrieval server 108.For example, asset database 144, search key database 146 and/ Or assets permission database 148 can by individual system or server storage and management, and can via being directly connected to or Be indirectly connected with (for example, via network, such as network 110) and asset store server 106 and/or asset retrieval server 108 Communication.In other unshowned embodiments, asset database 144 searches key database 146 and/or assets license count It is located in asset store server 106 or asset retrieval server 108 according to library 148.
Search the sample table in key database
Fig. 2 illustrates the exemplary table searched in key database 146 for being stored in Fig. 1 according to an embodiment 200 and exemplary table 250.As shown in Fig. 2, table 200 is to store the data object name of original data object title and modification to be referred to as Between relationship table.For example, table 200 may include the data object file name header 202 for listing original data object title, with And list the data object key name header 204 of the data object title of modification.Row 220,222 and 224 can be retouched in table 200 Draw the entry for various data objects.As shown in table 200, original data object title can be " FILE1 ", " FILE2 " and "FILE3".In certain embodiments, " FILE1 ", " FILE2 " and " FILE3 ", which can be, is mapped to same assets or sub- assets Data object title.As described above, searching key generator 126, that hashed value can be generated is original to be attached to as prefix Data object title.Therefore, the data object title of modification can be " 4H56FILE1 ", " G765FILE2 " and " 1AENFILE3 ", wherein " 4H56 ", " G765 " and " 1AEN " is additional hashed value.
Table 250 can be the pass between the file path in the data object title and asset database 144 of storage modification The table of system.For example, table 250 may include the data object key name header 252, Yi Jilie for the data object title for listing modification The data object location header 254 of the file path of corresponding data object out.Row 260,262 and 264 can be described in table 250 For the entry of various data objects.Although row 260,262 and 264 is shown in Figure 2 for continuously, what this was merely to illustrate Purpose.Because each of additional hashed value is started with different characters, the data object title of modification will likely be fallen In the different subregions for searching key database 146.Therefore, even if asset retrieval server 108 attempts connected reference " FILE1 ", " FILE2 " and " FILE3 " can also be routed to lookup key to the read requests for searching key database 146 Different subregions in database 146.
Although table 200 and table 250 are depicted as searching individual table in key database 146, but this does not imply that limit System.For example, the content of table 200 and table 250 can be combined into the single table for being stored in and searching in key database 146.
Sample table in assets permission database
Fig. 3 illustrates the exemplary table in the assets permission database 148 for being stored in Fig. 1 according to an embodiment 300 and exemplary table 350.As shown in figure 3, table 300 is that storage original data object title is referred to as with assets and/or sub- Asset Name Between relationship or mapping table.For example, table 300 may include the data object file name header for listing original data object title 302, and list the assets of one or more mappings and/or the asset name header 304 of sub- assets.Row 320,322 and 324 can To describe the entry for being directed to various data objects in table 300.As set forth in table 300, original data object title can be " FTLE1 ", " FTLE2 " and " FTLE3 ".Data object " FTLE1 ", " FTLE2 " and " FTLE3 " is each mapped to asset name "ASSET 1".But data object " FTLE1 " and " FTLE2 " may map to sub- asset name " SUB-ASSET 1 ", and count It may map to sub- asset name " SUB-ASSET 2 " according to object " FTLE3 ".As illustrated examples, data object " FILE1 " Both " FILE2 " may map to sub- asset name " SUB-ASSET 1 ", because two data objects are together with other data Object can be used to play back the assets (for example, film of 1080p version) of particular version together.
Table 350 can be the relationship between storage assets and/or sub- assets and license or the table of mapping.For example, table 350 can To include that assets and/or son are distributed in the asset name header 352 for listing one or more assets and/or sub- assets and identification The license header 354 of the license of assets.Row 360 and 362 can be described in table 350 for various assets and/or sub- assets Entry.As shown in table 350, the sub- assets " SUB-ASSET 1 " of assets " ASSET 1 ", which have, allows user 1 to being mapped to sub- money The license of the read access of the data object (for example, data object " FILE1 " and " FILE2 ") of production simultaneously has permission 2 nothing of user Weigh the license of the data object of access map.But the sub- assets " SUB-ASSET 2 " of assets " ASSET 1 " have and " SUB- ASSET 1 " different licenses.Sub- assets " SUB-ASSET 2 ", which have, allows user 1 to the data object for being mapped to sub- assets (for example, data object " FILE3 ") is read out the license of access, and there is the data object for allowing 2 pairs of user mappings to carry out Read access updates access and deletes the license of access.Therefore, multiple licenses can be distributed into special assets or sub- Asset Name Claim, and can be by the different sub- assets of difference for permitting to distribute to asset name.
Although table 300 and table 350 are depicted as individual table in assets permission database 148, but this does not imply that limit System.For example, the content of table 300 and table 350 can be combined into the single table being stored in assets permission database 148.
Example block diagram for managed data object
Fig. 4 is the block diagram of the asset store environment 100 of Fig. 1 according to an embodiment, is illustrated by asset store ring The operation for the managed data object that the component in border 100 executes.As shown in Figure 4, asset owner's equipment 104 can be at (1A) Data associated with the data object to be stored are transferred to mapper 122, assets License Management of the data object to assets Device 124 and/or lookup key generator 126.Data associated with the data object to be stored may include data object Title, assets associated with data object or sub- asset name instruction, and/or distribution assets or sub- asset name permitted It can.Data object can be mapped to by the mapper 122 of data object to assets at (2) to be referred to by asset owner's equipment 104 Fixed assets or sub- asset name.Then, the mapper 122 of data object to assets can be at (3) to assets License Management 124 designation date object of device is mapped to special assets or sub- asset name.Then, assets permit manager 124 can be in (4) The license that asset owner's equipment 104 provides is mapped to assets or sub- asset name by place, and is providing mapping storage at (5) It produces in permission database 148.
Data associated with data object are transmitted simultaneously at step (1A), it is associated with data object transmitting Before data, or after transmitting associated with data object data, asset owner's equipment 104 can at (1B) incite somebody to action Data object is transferred to asset storage management device 128 to store.Asset storage management device 128 can be at (6) by data pair As being stored in asset database 144.Asset storage management device 128 can also be at (7) by the storage location (example of data object Such as, file path) identification be transmitted to search key generator 126.Optionally, searching key generator 126 can be by looking into Asset database 144 is ask to determine storage location.
Identified storage location is used, modification can be generated at (8) for data object by searching key generator 126 Data object title.Hash is generated for example, searching key generator 126 and identified storage location can be used, and will hash The original title of data object is attached to as prefix to create the data object title of modification.Then, key generator is searched 126 can be at (9) by the data object of mapping and the modification of the data object title of original data object title to modification The mapping storage of title and the storage location of data object is into lookup key database 146.The data object title of modification can In the different subregions for searching key database 146 to allow relevant data object to be divided into.For example, as described above, searching The index of key database 146 can be based on the tree construction with root node, the child node of various ranks and leaf node, each Leaf node indicates to search the subregion of key database 146.The first character of the data object title of modification can determine data Object is assigned to which child node of root node, and second character of the data object title of modification can determine data object It is assigned to which child node of distributed child node, and so on, until data object is assigned to leaf node (for example, looking into Look for the subregion of key database 146).The original data object title of associated data object can have similar title (for example, " movie1file1 ", " movie1file2 ", " movie1file3 " etc.), and so if searching key database 146 is base Identical leaf node can be divided into (for example, dividing in the so relevant data object that original data object title is indexed Area) in.But for associated data object, hash, which is attached to original title as prefix, may cause the data pair of modification As the first character and/or successive character of title are different.Therefore, come by using the data object title of modification close to searching Key database 146 is indexed, and relevant data object can be distributed to different child node and/or leaf node, lead to phase The data object of pass is divided into the different subregions for searching key database 146.It is close that associated data object is divided into lookup Data query and/or retrieval time can be reduced in the different subregions of key database 146.
Although step (6) to step (9) occurs after being depicted in step (2) to step (5), but this does not imply that Limitation.For example, asset store server 106 can execute step (6) to step (9) before step (2) to step (5).
For accessing the example block diagram of data object
Fig. 5 is the block diagram of the asset store environment 100 of Fig. 1 according to an embodiment, is illustrated by asset store ring What the component in border 100 executed allows to access the operation of data object.As shown in Figure 5, end user device 102 at (1) to The request of the data object to be retrieved of the transmission identification of asset retrieval server 108.In response to receiving request, asset retrieval service Device 108 at (2) queries asset permission database 148 to determine associated with end user device 102 user (or terminal use Family equipment 102 itself) whether there is the license for accessing requested data object.As described herein, inquiry can be related to two Operation.For example, asset retrieval server 108 can be with queries asset permission database 148 which assets or sub- Asset Name identified Title is mapped to requested data object.Once it is determined that this point, asset retrieval server 108 can queries asset permitted Can database 148 to identify license associated with the assets mapped or sub- asset name.Asset retrieval server 108 can divide The license retrieved is analysed to determine whether user is authorized to data object.Optionally, asset retrieval server 108 can incite somebody to action The title and data object oriented of user or end user device 102 are transferred to assets permission database 148, and assets are permitted Database 148 can analyze as above such data described in asset retrieval server 108, returns to instruction user or terminal is used Whether family equipment 102 is authorized to the notice of data object.
If user or the uncommitted access data object of end user device 102, asset retrieval server 108 is to end End user device 102 sends the notice of instruction denied access, is not shown.Otherwise, if user or end user device 102 are awarded Power access data object, then asset retrieval server 108 searches key database 146 by inquiry to determine data at (3) The position of object.For example, can be indexed based on the data object title of modification to lookup key database 146.Therefore, Asset retrieval server 108 can inquire first table searched in key database 146, with determining original with data object The data object title of the corresponding modification of title.Once it is determined that this point, asset retrieval server 108 can use repair Key database 146 is searched in the data object name query changed, to identify the data object being stored in asset database 144 File path.
Once receiving the file path for the data object being stored in asset database 144, asset retrieval server 108 Data object can be retrieved from asset database 144 at (4).Then, asset retrieval server 108 can be at (5) The data object retrieved is transferred to end user device 102 to meet request.
Optionally, instead of transmitting the request of the data object to be retrieved of identification, terminal user to asset retrieval server 108 Equipment 102 can transmit the request of the assets or sub- assets to be retrieved of identification at (1) to asset retrieval server 108.Response In receiving request, the queries asset permission database 148 at (2) of asset retrieval server 108 is set with determination with terminal user Whether standby 102 associated users' (or end user device 102 itself) have access and specified assets or sub- asset name phase The license of associated data object.Asset retrieval server 108 can be identified and be referred to by queries asset permission database 148 Determine assets or sub- asset name is associated is licensed for determining.Asset retrieval server 108 can analyze retrieve permitted It can determine whether user is authorized to data object associated with assets or sub- asset name.Optionally, asset retrieval The title and assets of user or end user device 102 or sub- asset name can be transferred to assets license count by server 108 According to library 148, and assets permission database 148 can analyze as above such data described in asset retrieval server 108, It returns to instruction user or whether end user device 102 is authorized to data associated with specified assets or sub- asset name The notice of object.
If user or the uncommitted access number associated with specified assets or sub- asset name of end user device 102 According to object, then asset retrieval server 108 sends the notice of instruction denied access to end user device 102, is not shown.It is no Then, if user or end user device 102 are authorized to data object associated with specified assets or sub- asset name, Then asset retrieval server 108 can identify data object associated with specified assets or sub- asset name.For example, assets are examined Rope server 108 can be with queries asset permission database 148 to identify the data pair for being mapped to specified assets or sub- asset name As.Then, it is some or all of to determine can to search key database 146 by inquiry at (3) for asset retrieval server 108 The position of the data object of mapping.As set forth above, it is possible to based on the data object title of modification come to lookup key database 146 It is indexed.Therefore, asset retrieval server 108 can inquire search key database 146 in first table, with determine with The data object title of the corresponding modification of the original title of the data object of mapping.Once it is determined that this point, asset retrieval Server 108 can use the data object name query of modification to search key database 146, be stored in assets number with identification According to the file path of the data object of the mapping in library 144.
Once receiving the file path of the data object for the mapping being stored in asset database 144, asset retrieval clothes Business device 108 can retrieve the data object of mapping at (4) from asset database 144.Then, asset retrieval server 108 can at (5) by the data object retrieved (for example, sequentially, with outburst or group, concurrently etc.) be transferred to terminal User equipment 102 is to meet request.
Sample data object permits allocation routine
Fig. 6 is flow chart according to an embodiment, depicts the number illustratively realized by asset store server Permit allocation routine 600 according to object.As an example, the asset store server 106 of Fig. 1 can be configured as execution data object Permit allocation routine 600.Data object license allocation routine 600 starts from frame 602.
At frame 604, data associated with the data object to be stored are received.For example, data may include data pair The title of elephant, the instruction of assets associated with data object or sub- asset name, and/or distribution assets or sub- asset name License.
At frame 606, data object is mapped to the asset name that user specifies.For example, can be by multiple data objects It is mapped to asset name.
At frame 608, it is determined whether receive license from user.For example, it may include that identify will be with that institute is received The associated license of received asset name information.If receiving license, data object permit allocation routine 600 into Row arrives frame 612.Otherwise, data object license allocation routine 600 proceeds to frame 610.
At frame 610, default license is mapped to the received asset name of institute.For example, default license can be defined, so that Only allow to provide mapping the user of the data object of asset name to access data object.After the completion of frame 610, data pair As license allocation routine 600 proceeds to frame 614.
At frame 612, the received license of institute is mapped to asset name.In certain embodiments, multiple license mappings To asset name, such as the license that each user is proprietary.
At frame 614, the mapping of asset name is arrived in the mapping and license of storing data object to asset name.For example, reflecting Penetrating can store in assets permission database 148.Then, it is various to meet that mapping can be used in asset retrieval server 108 The request to data object that end user device 102 is submitted.After storage mapping, data object license distribution can be completed Routine 600, as shown in frame 616.
The data object title generating routine of instance modification
Fig. 7 is flow chart according to an embodiment, depicts and is repaired by what asset store server was illustratively realized The data object title generating routine 700 changed.As an example, the asset store server 106 of Fig. 1 can be configured as execution and repair The data object title generating routine 700 changed.The data object title generating routine 700 of modification starts from frame 702.
At frame 704, variable i is equal to 1, and variable n is equal to corresponding with asset name The quantity of data object.For example, asset owner's equipment 104 can indicate that multiple associated data objects will be stored in assets number According in library 144, wherein each of associated data object can be sorted in asset name.
At frame 706, the title of data object i is received.It is mentioned for example, the title of data object i can be asset owner The title of confession.
At frame 708, the storage location of data object i is received.For example, storage location can be the file of data object i Path, storage location of the designation date object i in asset database 144.
At frame 710, hash corresponding with data object i is generated.It is, for example, possible to use the file roads of data object i Diameter generates hash.SHA-256 or other similar technology can be used to complete hash function.
At frame 712, the hash generated and data object i are set by the data object title of the modification of data object i Title combination.For example, the title of data object i can be attached to form modification using the hashed value of generation as prefix Data object title.In optional embodiment, data pair can be set by the data object title of the modification of data object i As i title in character random rearrangement.
At frame 714, the original title of data object i is mapped to the data object title of modification.For example, searching key Generator 126 can be by this mapping storage in searching key database 146.
At frame 716, the data object title of modification is mapped to the storage location of data object i.For example, searching key Generator 126 can be by this mapping storage in searching key database 146, so that being come pair using the data object title of modification Key database 146 is searched to be indexed.
At frame 718, determine whether variable i is equal to variable n.If two variables are equal, this instruction, which has been processed by, to be wanted All data objects being stored in asset database 144, and the data object title generating routine of modification can be completed 700, as shown in block 722.Otherwise, all data objects that be stored in asset database 144 are not yet handled, and modify Data object title generating routine 700 proceeds to frame 720.
At frame 720, variable i is incremented by 1.After the completion of frame 720, the data object title generating routine 700 of modification is returned Frame 706 and repeat block 706 to 718 are returned to, until handling all data objects.
Term
All methods described herein and task can be executed and are fully automated by computer system.In some cases Under, computer system may include by network communication and interoperability with multiple and different computer for executing described function or It calculates equipment (for example, physical server, work station, storage array, cloud computing resources etc.).Each such calculating equipment is usual Including a processor (or multiple processors), execution is stored in memory or other non-transitory computer-readable storage mediums Matter or program instruction or module in equipment (for example, solid storage device, disc driver etc.).Various respective functions disclosed herein It can be implemented in the instruction of this class method, or can be in the application specific circuit (for example, ASIC or FPGA) of computer system Middle realization.In the case where computer system includes multiple calculating equipment, these equipment can with but be not necessarily located in same place.It is logical It crosses and the physical storage device of such as solid state memory chip or disk is transformed to different states, it is public that institute can be persistently stored The result of the method and task opened.In some embodiments, computer system can be computing system based on cloud, processing Resource is shared by multiple and different commercial entities or other users.
Depending on embodiment, certain movements, event or the function of any process described herein or algorithm can be with not With sequence execute, can be added, merge or be omitted completely (for example, and not all description operation or event be all for Necessary to algorithm practice).In addition, in certain embodiments, operation or event can for example by multiple threads, interruption at Reason or multiple processors or processor cores are performed simultaneously on other parallel architectures, rather than sequence executes.
It can in conjunction with various illustrative logical block diagrams, module, routine and the algorithm steps that embodiment disclosed herein describes To be embodied as electronic hardware (for example, ASIC or FPGA device), the on computer hardware computer software that runs, or both Combination.In addition, the various illustrative logical block diagrams and module in conjunction with embodiment disclosed herein description can be designed to The machine for executing functions described herein is realized or is executed, such as processor device, digital signal processor (DSP), dedicated collection At circuit (ASIC), field programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic, divide Vertical hardware component or any combination thereof.Processor device can be microprocessor, but in alternative solution, processor device can To be that controller, microcontroller or state machine, their combination are such.Processor device may include being configured as handling The circuit of computer executable instructions.In another embodiment, processor device include FPGA or execute logical operation and Other programmable devices of computer executable instructions are not handled.Processor device also can be implemented as calculating the combination of equipment, Such as the combination of DSP and microprocessor, multi-microprocessor, in conjunction with DSP core one or more microprocessors or it is any its His such configuration.Although relating generally to digital technology herein to be described, processor device can also mainly include mould Quasi- component.For example, some or all of Renderings described herein can be in analog circuit or hybrid analog-digital simulation and digital circuit It realizes.Calculating environment may include any kind of computer system, including but not limited to based on the department of computer science of microprocessor Computing engines in system, mainframe computer, digital signal processor, portable computing device, device controller or device, only Lift several.
The element of the method, process, routine or the algorithm that describe in conjunction with embodiment disclosed herein can be directly in hardware In, implement in the software module executed by processor device or in the combination of the two.Software module may reside within RAM and deposit Reservoir, flash memory, ROM memory, eprom memory, eeprom memory, register, hard disk, moveable magnetic disc, CD-ROM or In the non-transitory computer-readable storage media of any other form.Exemplary storage medium may be coupled to processor and sets It is standby, allow processor device that information is written from read information and to storage medium.In alternative solution, storage Medium can be integrated with processor device.Processor device and storage medium may reside in ASIC.ASIC can be resident In the user terminal.In alternative solution, processor device and storage medium can be used as discrete assembly and reside in user terminal In.
Unless expressly stated otherwise, or in used context otherwise understand, it is otherwise used herein Conditional statement (such as " can with ", " possibility ", " such as " etc) and be typically aimed at the certain embodiments of expression include certain features, Element or step, and other embodiments do not include these features, element or step.Therefore, such conditional statement usually not purport Imply feature, element or step be by one or more embodiments require it is any in a manner of, or one or more implement Scheme necessarily includes for determining whether these features, element or step wrap in the case where being with or without other inputs or prompt Include the logic that will be executed in any specific embodiment or wherein.Term " includes ", " having " etc be it is synonymous and And in a manner of open include use, and be not excluded for additional elements, feature, movement, operation etc..In addition, term "or" It include in meaning (rather than in its exclusive meaning) use so that for example when be used to connection element list when, term "or" indicates one, some or all elements in list.
Unless expressly stated otherwise, otherwise such as Disjunctive Languages of phrase " at least one of X, Y or Z " etc are leading to It is otherwise interpreted as in the context being often used for indicating that project, item etc. can be X, Y or Z or its any group It closes (for example, X, Y or Z).Therefore, such Disjunctive Languages are generally not intended to and should not imply that certain embodiment needs are respectively deposited X at least one, at least one and the Z of Y at least one.
In view of following Additional Terms, above content may be better understood:
1. a method of computer implementation comprising:
It is realized by one or more equipment that calculate configured with specific executable instruction,
Receive the title for the media object being stored in asset data memory block;
Receive the identification of the storage location of the media object in the asset data memory block;
The storage location based on the media object in the asset data memory block generates the media object Hashed value;
The entitled media object based on the hashed value and the media object generates the media pair of modification As title;
The title of the media object is mapped to the media object title of the modification;
The storage location is mapped to the media object title of the modification;
The title of the media object is stored to the media object of the modification in searching key data memory block The mapping of title;And
In the media object title searched and store the storage location in key data memory block to the modification The mapping,
Wherein store the title of the media object to the modification media object title the mapping and The storage location to the modification media object title the mapping make the lookup key data memory block be based on institute The media object title for stating modification is indexed.
2. the computer implemented method according to clause 1, further comprising:
Receive the request of the access media object from user equipment;
Determine that the user equipment is authorized to the media object;
Using the title of the media object, the lookup key data memory block is inquired to identify the modification Media object title is mapped to the title of the media object;
Using the media object title of the modification, the lookup key data memory block is inquired to identify the media pair As being stored in the storage location;
The media object is retrieved from the storage location;And
The media object transmissions are met into the request to the user equipment.
3. the computer implemented method according to clause 1, wherein generating the media pair of modification for the media object As title further comprises being attached to the title of the media object using the hashed value as prefix to repair described in being formed The media object title changed.
4. the computer implemented method according to clause 1, wherein being stored in the institute in the asset data memory block State that both media object and the second media object are all associated with asset name, and the wherein title of the media object First character and the first character of the title of second media object be identical.
5. the computer implemented method according to clause 4, wherein first of the media object title of the modification Character and the first character of the media object title of the second modification corresponding with second media object are different, and are made The media object title for obtaining the modification is listed in first subregion for searching key data memory block, and described second The media object title of modification is listed in the second subregion of the lookup key data memory block different from first subregion In.
6. a kind of system comprising:
Key data memory block is searched, the storage location of identification media object is configured as;And
Asset storage system comprising at least one processor and at least one processor, wherein it is described at least one deposit Reservoir includes instruction, and described instruction makes the asset storage system when being executed by least one described processor:
Receive the title of the media object;
Receive the identification of the storage location of the media object;
The entitled media object based on the media object generates the media object title of modification;
The title of the media object is mapped to the media object title of the modification;
The storage location is mapped to the media object title of the modification;
Store the title of the media object to the modification media object title the mapping;And
Store the storage location to the modification media object title the mapping,
Wherein store the title of the media object to the modification media object title the mapping and The storage location to the modification media object title the mapping make the lookup key data memory block be based on institute The media object title for stating modification is indexed.
7. further comprising asset retrieval server according to system described in clause 6, wherein the second instruction is being performed When make the asset retrieval server:
Receive the request of the access media object from user equipment;
Determine that the user equipment is authorized to the media object;
Using the title of the media object, the lookup key data memory block is inquired to identify the modification Media object title is mapped to the title of the media object;
Using the media object title of the modification, the lookup key data memory block is inquired to identify the media pair As being stored in the storage location;
The media object is retrieved from the storage location;And
The media object transmissions are met into the request to the user equipment.
8. wherein described instruction is further when being executed by least one described processor according to system described in clause 6 Make the asset storage system:
The storage location based on the media object is that the media object generates hashed value;
The group of the title based on the hashed value and the media object is combined into described in the media object generation and repairs The media object title changed.
9. wherein described instruction is further when being executed by least one described processor according to system described in clause 8 The asset storage system is set using the hashed value as prefix to be attached to the title of the media object described to be formed The media object title of modification.
10. wherein described instruction is further when being executed by least one described processor according to system described in clause 6 The asset storage system is set to overturn the sequence of character in the title of the media object to form the matchmaker of the modification Body object oriented.
11. according to system described in clause 6, wherein both the media object and the second media object all with asset name It is associated, and wherein the of the title of the first character of the title of the media object and second media object One character is identical.
12. according to system described in clause 11, wherein the first character of the media object title of the modification and with institute The first character for stating the media object title of corresponding second modification of the second media object is different, so that the modification Media object title be listed in it is described search key data memory block the first subregion in, and it is described second modification media Object oriented is listed in the second subregion of the lookup key data memory block different from first subregion.
13. according to system described in clause 6, wherein the storage location includes the file path of the media object.
14. a kind of non-transitory computer-readable medium is stored thereon with executable program code, the executable program Code indicates that one or more equipment that calculate execute operation when executed, and the operation includes:
Receive the title of the media object;
The entitled media object based on the media object generates the media object title of modification;
The title of the media object is mapped to the media object title of the modification;
The storage location of the media object is mapped to the media object title of the modification;
Store the title of the media object to the modification media object title the mapping;And
Store the storage location of the media object to the modification media object title the mapping.
15. according to non-transitory computer-readable medium described in clause 14, wherein the operation further comprises:
The storage location based on the media object is that the media object generates hashed value;
The group of the title based on the hashed value and the media object is combined into described in the media object generation and repairs The media object title changed.
16. according to non-transitory computer-readable medium described in clause 15, wherein the operation further comprises by institute Hashed value is stated as prefix and is attached to the title of the media object to form the media object title of the modification.
17. according to non-transitory computer-readable medium described in clause 14, wherein the operation further comprises overturning The sequence of character in the title of the media object is to form the media object title of the modification.
18. according to non-transitory computer-readable medium described in clause 14, wherein the media object and the second media Both objects are all associated with asset name, and the wherein first character of the title of the media object and described the The first character of the title of two media objects is identical.
19. according to non-transitory computer-readable medium described in clause 18, wherein the media object title of the modification First character and the first character of media object title of the second modification corresponding with second media object be Different, so that the media object title of the modification is listed in first subregion in index datastore area, and described The media object title of two modifications is listed in second subregion in the index datastore area different from first subregion.
20. according to non-transitory computer-readable medium described in clause 14, wherein storing the described of the media object The mapping of media object title and the storage location of the media object of the title to the modification are repaired described in The mapping of the media object title changed is indexed index datastore area based on the media object title of the modification.
And following Additional Terms:
1. a method of computer implementation comprising:
It is realized by one or more equipment that calculate configured with specific executable instruction,
Data associated with the media object to be stored are received, wherein received data includes the media object The license collection of title, the instruction of asset name associated with the media object and the distribution assets;
The title of the media object is mapped to the asset name;
License collection is mapped to the asset name;
The mapping storage of the title of the media object to the asset name is deposited in assets license data In storage area;
By the mapping storage of the license collection to the asset name in assets permission data store area;
Receive the request of the access media object from user equipment;
Using the title of the media object, assets permission data store area is inquired to identify the Asset Name Claim the title for being mapped to the media object;
Using the asset name, assets permission data store area is inquired to retrieve and is mapped to the asset name The license collection;
Determine that user associated with the user equipment is authorized to the media based on the license collection retrieved Object;
The media object is retrieved from asset data memory block;And
The media object transmissions are met into the request to the user equipment.
2. the computer implemented method according to clause 1, further comprising:
Receive the license based on the second license collection modification asset name from asset owner's equipment second is asked It asks;
The asset name is mapped to the second license collection;And
By the mapping storage of the asset name to the second license collection in assets permission data store area In.
3. the computer implemented method according to clause 1, wherein the media object includes one in the following terms : movie file, television program file, music video file or audio book file.
4. a kind of system comprising:
Assets permission data store area is configured as identification license associated with media object;And
Asset storage system comprising processor and memory, wherein the memory include instruction, described instruction by The processor makes the asset storage system when executing:
Data associated with the media object are received, wherein received data includes the name of the media object The license collection of title, the instruction of asset name associated with the media object and the distribution assets;
The title of the media object is mapped to the asset name;
License collection is mapped to the asset name;
The title of the media object is stored to the mapping of the asset name;And
The mapping that the license collection arrives the asset name is stored,
Wherein store the mapping and license collection of the title of the media object to the asset name The mapping to the asset name makes access of the license collection control to the media object.
5. further comprising asset retrieval server according to system described in clause 4, wherein the second instruction is being performed When make the asset retrieval server:
Receive the request of the access media object from user equipment;
Using the title of the media object, assets permission data store area is inquired to identify the Asset Name Claim the title for being mapped to the media object;
Using the asset name, assets permission data store area is inquired to retrieve and is mapped to the asset name The license collection;
Determine that user associated with the user equipment is authorized to the media object;
Retrieve the media object;And
The media object transmissions are met into the request to the user equipment.
6. wherein described instruction further makes the money when being executed by the processor according to system described in clause 4 Produce storage system:
Receive the license based on the second license collection modification asset name from asset owner's equipment second is asked It asks;
The asset name is mapped to the second license collection;And
Store the mapping of the asset name to the second license collection.
7. according to system described in clause 6, wherein second request includes indicating that second license collects overdue Time parameter.
8. wherein described instruction further makes the money when being executed by the processor according to system described in clause 4 Produce the license that storage system updates the asset name in response to the generation of event.
9. according to system described in clause 8, wherein the event package includes one: second media object in the following terms Storage, it is described license collection expire or the modification of the media object.
10. wherein described instruction further makes the money when being executed by the processor according to system described in clause 4 It produces storage system and executes batch operation, by the media object and any other media object for being mapped to the asset name The second accumulation layer is moved to from the first accumulation layer.
11. according to system described in clause 4, wherein the media object includes one in the following terms: movie file, Television program file, music video file or audio book file.
12. according to system described in clause 4, wherein license collection includes at least one of the following: authorizing institute It states the read access of user, the write-access for authorizing the user, the deletion access for authorizing the user or authorizes the user Update metadata access.
13. a kind of non-transitory computer-readable medium is stored thereon with executable program code, the executable program Code indicates that one or more equipment that calculate execute operation when executed, and the operation includes:
Receive associated with media object data, wherein received data include the media object title and The instruction of asset name associated with the media object;
The title of the media object is mapped to the asset name;
In response to determining that received data does not indicate any license collection and default license collection is mapped to the Asset Name Claim;
The title of the media object is stored to the mapping of the asset name;And
The mapping that the default license collection arrives the asset name is stored,
The mapping and the default of the title of the media object to the asset name is wherein stored to be permitted The mapping that the asset name can be collected makes access of the default license collection control to the media object.
14. according to non-transitory computer-readable medium described in clause 13, wherein the operation further comprises:
Receive the second request that the license of the asset name is modified based on the second license collection;
The asset name is mapped to the second license collection;And
Store the mapping of the asset name to the second license collection.
15. according to non-transitory computer-readable medium described in clause 14, wherein second request includes instruction institute State the overdue time parameter of the second license collection.
16. according to non-transitory computer-readable medium described in clause 13, wherein the operation further comprises response In event generation and update the license of the asset name.
17. according to non-transitory computer-readable medium described in clause 16, wherein the event package includes in the following terms One: second media object storage, it is described license collection expire or the modification of the media object.
18. according to non-transitory computer-readable medium described in clause 13, wherein the operation further comprises executing Batch operation moves the media object and any other media object for being mapped to the asset name from the first accumulation layer It moves to the second accumulation layer.
19. according to non-transitory computer-readable medium described in clause 13, wherein the media object includes following One in: movie file, television program file, music video file or audio book file.
20. according to non-transitory computer-readable medium described in clause 13, wherein default license collection includes following At least one of in items: authorize the read access of user, the write-access for authorizing the user, the deletion for authorizing the user Access or the update metadata access for authorizing the user.
Although above-mentioned specific embodiment has been shown, has been described and pointed out applied to the novel special of various embodiments Sign, it will be appreciated that can without departing from the spirit of the present disclosure the form to the equipment or algorithm shown and Details carries out various omissions, substitutions and changes.It will recognize, certain embodiments described herein, which can be implemented, not to be provided In the form of all features and benefit as described herein, because some features can be used separately or practice with other features.This The range of certain embodiments disclosed in text is by appended claims rather than the description of front indicates.In the meaning of claim It is included within the scope of its with all changes in equivalency range.

Claims (15)

1. a method of computer implementation comprising:
It is realized by one or more equipment that calculate configured with specific executable instruction,
Data associated with the media object to be stored are received, wherein the received data include the name of the media object The license collection of title, the instruction of asset name associated with the media object and the distribution assets;
The title of the media object is mapped to the asset name;
License collection is mapped to the asset name;
By the mapping storage of the title of the media object to the asset name in assets permission data store area In;
By the mapping storage of the license collection to the asset name in assets permission data store area;
Receive the request of the access media object from user equipment;
Using the title of the media object, assets permission data store area is inquired to identify the asset name quilt It is mapped to the title of the media object;
Using the asset name, inquires assets permission data store area and be mapped to described in the asset name with retrieving License collection;
Determine that user associated with the user equipment is authorized to the media based on the license collection retrieved Object;
The media object is retrieved from asset data memory block;And
The media object transmissions are met into the request to the user equipment.
2. computer implemented method according to claim 1, further comprising:
Receive the second request of the license that the asset name is modified based on the second license collection from asset owner's equipment;
The asset name is mapped to the second license collection;And
By the mapping storage of the asset name to the second license collection in assets permission data store area.
3. computer implemented method according to claim 1, wherein the media object includes one in the following terms : movie file, television program file, music video file or audio book file.
4. a kind of system comprising:
Assets permission data store area is configured as identification license associated with media object;And
Asset storage system comprising processor and memory, wherein the memory includes instruction, described instruction is by described Processor makes the asset storage system when executing:
Receive associated with media object data, wherein the received data include the media object title, The instruction of asset name associated with the media object and the license collection of the distribution assets;
The title of the media object is mapped to the asset name;
License collection is mapped to the asset name;
The title of the media object is stored to the mapping of the asset name;And
The mapping that the license collection arrives the asset name is stored,
The mapping and the license of the title of the media object to the asset name is wherein stored to collect to institute The mapping of asset name is stated so that access of the license collection control to the media object.
5. system according to claim 4 further comprises asset retrieval server, wherein the second instruction is being performed When make the asset retrieval server:
Receive the request of the access media object from user equipment;
Using the title of the media object, assets permission data store area is inquired to identify the asset name quilt It is mapped to the title of the media object;
Using the asset name, inquires assets permission data store area and be mapped to described in the asset name with retrieving License collection;
Determine that user associated with the user equipment is authorized to the media object;
Retrieve the media object;And
The media object transmissions are met into the request to the user equipment.
6. system according to claim 4, wherein described instruction further makes the money when being executed by the processor Produce storage system:
Receive the second request of the license that the asset name is modified based on the second license collection from asset owner's equipment;
The asset name is mapped to the second license collection;And
Store the mapping of the asset name to the second license collection.
7. system according to claim 6, wherein second request includes indicating that second license collects overdue Time parameter.
8. system according to claim 4, wherein described instruction further makes the money when being executed by the processor Produce the license that storage system updates the asset name in response to the generation of event.
9. system according to claim 8, wherein the event package includes one: second media object in the following terms Storage, it is described license collection expire or the modification of the media object.
10. system according to claim 4, wherein described instruction further makes the money when being executed by the processor It produces storage system and executes batch operation, by the media object and any other media object for being mapped to the asset name The second accumulation layer is moved to from the first accumulation layer.
11. system according to claim 4, wherein the media object includes one in the following terms: movie file, Television program file, music video file or audio book file.
12. system according to claim 4, wherein license collection includes at least one of the following: authorizing institute It states the read access of user, the write-access for authorizing the user, the deletion access for authorizing the user or authorizes the user Update metadata access.
13. a kind of system comprising:
One or more processors;And
One or more memories, are stored thereon with instruction, and described instruction makes when being executed by one or more of processors One or more of processors:
Receive associated with media object data, wherein the received data include the media object title and with The instruction of the associated asset name of media object;
The title of the media object is mapped to the asset name;
Any license collection is not indicated in response to the determination received data and default license collection is mapped to the asset name;
The title of the media object is stored to the mapping of the asset name;And
The mapping that the default license collection arrives the asset name is stored,
Wherein store the mapping and default license collection of the title of the media object to the asset name The mapping to the asset name makes access of the default license collection control to the media object.
14. system according to claim 13, wherein the operation further comprises:
Receive the second request that the license of the asset name is modified based on the second license collection;
The asset name is mapped to the second license collection;And
Store the mapping of the asset name to the second license collection.
15. system according to claim 13, wherein the operation further comprises the generation in response to event and updates The license of the asset name.
CN201780064128.6A 2016-09-23 2017-09-21 Media asset access control system Active CN109952570B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202410325889.4A CN118133347A (en) 2016-09-23 2017-09-21 Media Asset Access Control System

Applications Claiming Priority (5)

Application Number Priority Date Filing Date Title
US15/275,020 2016-09-23
US15/275,082 2016-09-23
US15/275,082 US10592546B2 (en) 2016-09-23 2016-09-23 System for optimizing access to an indexed database
US15/275,020 US10346458B2 (en) 2016-09-23 2016-09-23 Media asset access control system
PCT/US2017/052797 WO2018057794A1 (en) 2016-09-23 2017-09-21 Media asset access control system

Related Child Applications (1)

Application Number Title Priority Date Filing Date
CN202410325889.4A Division CN118133347A (en) 2016-09-23 2017-09-21 Media Asset Access Control System

Publications (2)

Publication Number Publication Date
CN109952570A true CN109952570A (en) 2019-06-28
CN109952570B CN109952570B (en) 2024-04-05

Family

ID=60009743

Family Applications (2)

Application Number Title Priority Date Filing Date
CN201780064128.6A Active CN109952570B (en) 2016-09-23 2017-09-21 Media asset access control system
CN202410325889.4A Pending CN118133347A (en) 2016-09-23 2017-09-21 Media Asset Access Control System

Family Applications After (1)

Application Number Title Priority Date Filing Date
CN202410325889.4A Pending CN118133347A (en) 2016-09-23 2017-09-21 Media Asset Access Control System

Country Status (2)

Country Link
CN (2) CN109952570B (en)
WO (1) WO2018057794A1 (en)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1845032A (en) * 2005-04-06 2006-10-11 杭州波导软件有限公司 Method for realizing classification management of use right of mobile terminal user
CN101408882A (en) * 2008-08-05 2009-04-15 北大方正集团有限公司 Method and system for searching authorisation document
US20120185435A1 (en) * 2011-01-14 2012-07-19 Apple Inc. Organizing versioning according to permissions
US20140143543A1 (en) * 2012-11-20 2014-05-22 Google Inc. Delegate authorization in cloud-based storage system

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7287053B2 (en) * 2002-01-15 2007-10-23 International Business Machines Corporation Ad hoc data sharing in virtual team rooms
US8600998B1 (en) * 2010-02-17 2013-12-03 Netapp, Inc. Method and system for managing metadata in a cluster based storage environment

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1845032A (en) * 2005-04-06 2006-10-11 杭州波导软件有限公司 Method for realizing classification management of use right of mobile terminal user
CN101408882A (en) * 2008-08-05 2009-04-15 北大方正集团有限公司 Method and system for searching authorisation document
US20120185435A1 (en) * 2011-01-14 2012-07-19 Apple Inc. Organizing versioning according to permissions
US20140143543A1 (en) * 2012-11-20 2014-05-22 Google Inc. Delegate authorization in cloud-based storage system

Also Published As

Publication number Publication date
WO2018057794A1 (en) 2018-03-29
CN118133347A (en) 2024-06-04
CN109952570B (en) 2024-04-05

Similar Documents

Publication Publication Date Title
US10592546B2 (en) System for optimizing access to an indexed database
US10769248B2 (en) Satellite and central asset registry systems and methods and rights management systems
US9396260B2 (en) Managing multiple virtual world accounts from a single virtual lobby interface
RU2367010C2 (en) System and method of generating aggregated data presentations in computer network
JP6062863B2 (en) Method and apparatus for aggregating server-based media content and LAN-based media content to enable efficient search
KR101828642B1 (en) Brokered item access for isolated applications
US11620324B2 (en) Media asset access control system
US7617250B2 (en) Semantic file system
US8250094B2 (en) Relational lockdown for an item store
US9104680B2 (en) Method for accessing files of a file system according to metadata and device implementing the method
CN111680041A (en) Safe and efficient access method for heterogeneous data
EP3577587A1 (en) Satellite and central asset registry systems and methods and rights management systems
US20170060892A1 (en) Search-based shareable collections
CN109952570A (en) Media asset access control system
US11366810B2 (en) Index contention under high concurrency in a database system
Hohenstein et al. A Multi-criteria Approach for Large-object Cloud Storage.
Jaeger et al. Extending Cloud-based Object Storage with Content Centric Services.
RADOVICI et al. DISTRIBUTED MULTIMEDIA FILE SYSTEM.

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant