Obviousness

Obviousness Analysis (35 U.S.C. § 103) for US Patent 8566461

To determine the obviousness of US Patent 8566461 under 35 U.S.C. § 103, we must identify combinations of prior art references that would have rendered the claimed invention obvious to a person having ordinary skill in the art (POSA) at the time of the invention (i.e., before the priority date of June 9, 2004). This analysis will explain the motivation a POSA would have had to combine these references.

The independent claims of US8566461, as outlined in the summary, broadly cover a system and method for managing access to network content using a token derived from a voucher, and enforcing publisher's terms of service, specifically including a maximum number of simultaneous streams.

Key Elements of Independent Claims 1 and 9:

• Validating a token for network content access, where the token is generated from a validated voucher.
• The voucher has associated publisher's terms of service, and the token includes a unique transaction ID.
• Denying access if the token (or associated activity) does not comply with terms of service.
• Specifically, terms of service include a maximum number of simultaneous streams per unique transaction ID/voucher.
• Denial involves checking current streams against this maximum.
• (For dependent claims) Periodically checking and terminating streams based on a voucher's end time, often implemented via a plug-in on a media server.

Valid Prior Art References for Combination (priority date before 2004-06-09):

Based on the priority date of US8566461 (June 9, 2004), the following examiner-cited patents are considered valid prior art:

1. US20030037070A1 (Firstlook.Com.) - "Streaming media security system" (Priority: 2001-07-31)
2. US6718328B1 (Akamai Technologies, Inc.) - "System and method for providing controlled and secured access to network resources" (Priority: 2000-02-28)
3. US6868403B1 (Microsoft Corporation) - "Secure online music distribution system" (Priority: 1998-02-06)
4. US20050060389A1 (Ludmila Cherkasova) - "System and method for evaluating a capacity of a streaming media server for supporting a workload" (Priority: 2003-09-12)
5. US6948061B1 (Certicom Corp.) - "Method and device for performing secure transactions" (Priority: 2000-09-20)
6. US20060095779A9 (Shivaram Bhat) - "Uniform resource locator access management and control system and method" (Priority: 2001-08-06)
7. US8819253B2 (Oracle America, Inc.) - "Network message generation for automated authentication" (Priority: 2001-11-13)

Obviousness Combination for Independent Claims 1 and 9

A person of ordinary skill in the art (POSA) would have been motivated to combine the teachings of US6868403B1 (Secure online music distribution system), US20050060389A1 (System and method for evaluating a capacity of a streaming media server for supporting a workload), and US8819253B2 (Network message generation for automated authentication) to arrive at the inventions claimed in US8566461.

1. Primary Reference: US6868403B1 (Secure online music distribution system)

• Disclosure: This patent describes a system for the secure online distribution of music. Music is a form of "network content" as defined in US8566461. Such a system would inherently involve processes for user authentication, authorization to access content, handling user transactions (e.g., purchases or subscriptions), and delivering media from a server to a user's media player. Crucially, a secure distribution system would establish and enforce "publisher's terms of service" for content access and would deny access if those terms were not met. It would also employ unique identifiers for transactions to track content access.

2. Secondary Reference: US20050060389A1 (System and method for evaluating a capacity of a streaming media server for supporting a workload)

• Disclosure: This patent explicitly deals with streaming media servers and methods for evaluating their capacity to handle workloads. While focused on evaluation, it highlights the inherent understanding within the art that streaming media servers have finite resources and that the number of concurrent streams directly impacts server performance and user experience.

3. Secondary Reference: US8819253B2 (Network message generation for automated authentication)

• Disclosure: This patent describes techniques for "automated authentication" through "network message generation." In the context of secure access, this would encompass mechanisms for users to obtain and use credentials for accessing network resources. The concept of different stages of authorization, such as a primary entitlement (analogous to a "voucher") leading to a specific, perhaps temporary, access credential (analogous to a "token"), is a well-known security practice to provide flexibility and control in access management.

Motivation for Combination and Obviousness:

A POSA in the field of secure online media distribution (such as one working on the system described in US6868403B1) would be motivated to combine the teachings of these references for several reasons:

• Implementing granular access control with vouchers and tokens (US6868403B1 + US8819253B2): In a secure media distribution system like that of US6868403B1, a POSA would seek to enhance control over content access. Automating authentication and credential generation (as taught by US8819253B2) would naturally lead to a system where a user's initial entitlement (a "voucher" from a transaction, possibly detailed in US6948061B1 on secure transactions) is processed to generate a more specific, perhaps time-limited or device-specific, "token" for actual streaming access. This provides a flexible and revocable means of granting access without re-validating the full transaction for every request. The token would logically include a unique ID from the originating transaction for tracking purposes, a concept familiar from US6868403B1's need to track content usage and US6948061B1's secure transactions.

• Enforcing stream limits as a term of service (US6868403B1 + US20050060389A1): Given the understanding from US20050060389A1 that streaming media server capacity is a critical factor for performance and scalability, a POSA working on a secure online music distribution system (US6868403B1) would be motivated to manage server resources efficiently. Limiting the "maximum number of simultaneous streams" that a user (or a specific transaction identified by its unique ID) could access at any one time is an obvious solution to prevent server overload, ensure fair resource allocation, and implement differentiated business models (e.g., premium users get more concurrent streams). Integrating this technical limitation directly into the "publisher's terms of service" is a straightforward business decision to control content usage and monetize access. Once this term is established, the logical step for a POSA is to implement a mechanism to "check a number of current streams" associated with the unique ID and "deny access" if that number exceeds the defined maximum, as part of the overall compliance check already present in secure access systems (US6868403B1).

Obviousness for Dependent Claims (e.g., Time-based Termination, Plug-in Implementation)

• Time-based Termination (Claim 5, 10): A secure media distribution system (US6868403B1) would likely offer time-limited access (e.g., subscriptions, rentals). The concept of expiring credentials is also common in authentication systems (e.g., US8819253B2's automated authentication). A POSA would be motivated to ensure that media access is automatically terminated when the authorized time window (associated with the voucher or token) expires, to prevent unauthorized prolonged usage and enforce business rules. Periodically checking active streams against their expiry times and terminating expired ones is a well-known method in system administration and security to manage dynamic access rights.

• Plug-in Implementation (Claim 6, 7, 8, 12, 13): The use of "plug-ins" or "event handlers" to extend the functionality of server software (such as a media server or Windows Media Server mentioned in the patent) is a pervasive and well-understood software architectural pattern. A POSA designing or modifying a media access manager server would find it obvious to implement custom logic (like enforcing stream limits or checking expiration times) as a plug-in, rather than altering the core server code, for flexibility, modularity, and ease of deployment.

Conclusion:

The combination of US6868403B1, US20050060389A1, and US8819253B2 (along with general knowledge in the art regarding security and software architecture) would render the claims of US8566461 obvious. A POSA, driven by the desire to manage server resources efficiently, enforce flexible business models for media distribution, and implement robust access control, would have been motivated to combine these teachings to create a system that uses a token derived from a voucher, enforces a maximum number of simultaneous streams as a term of service, and automatically denies or terminates access upon non-compliance or expiration.