Use VG Authorization Server Level of Token Access

This section provides introductory information about how to integrate VideoGuard into your existing systems. It is not necessary to run IIS and WMS in the same machine.  VideoGuard can be used in a different environments. 

The time of machines in the clustered servers must be in sync.

 

 

1. A request to view a video mms://mediaserver/PlayVideo.asp?video=ID4.asf sent from userís browser to web server.

2. The web page PlayVideo.asp calls the method GetEncryptedSToken() in VGAuthorization.dll component interface to pass in variables TokenValidPeriod, Username, and UserIP.

<% '-- PlayVideo.asp

Set Obj = Server.CreateOjbect("VGAuthorization.AuthorizeAdmin")
TokenValidTime = 5 'seconds
UserIP = "10.0.128.3"
UserName="KenW"

STokenID = Obj.GetEncryptedSToken(
TokenValidTime ,UserIP ,UserName)

.......

%>

 

3. The VGAuthorization.dll returns an encrypted STOKENID to web page PlayVideo.asp.

4. The Web servers returns a URL mms://mediaserver/ID4.asf?STOKENID=FDS321AEWTRE543TRTY324TRYTRUYT321H243JH to the browser.

<% '-- PlayVideo.asp

Set Obj = Server.CreateOjbect("VGAuthorization.AuthorizeAdmin")
TokenValidTime = 5 'seconds
UserIP = "10.0.128.3"
UserName="KenW"

STokenID = Obj.GetEncryptedSToken(
TokenValidTime ,UserIP ,UserName)
VideoFile = Request.QueryString("video")
Response.Redirect "mms://mediaserver/" & VideoFile & "?STOKENID=" & StokenID

%>

 

5. The browser connects to WMS with the above URL. VG authorization plug-in captures the STOKENID value. The streaming request is granted if the decrypted STOKENID value matches the IP address of Window Media Player and also the connection time is within token valid period time. Otherwise, the request is denied. If the request is granted, the username will be used in all VG plug-ins.

6. Windows Media Services depends on the result of Token Access checking to grant/deny the streaming request.