Abstract: In some embodiments, an electronic device presents media items from different media applications in a unified media browsing application. In some embodiments, an electronic device facilitates browsing of media from different media applications based on category of media (e.g., movies, television shows, etc.). In some embodiments, an electronic device facilitates setup of a unified media browsing application that presents media items from different media applications in a unified media browsing user interface. In some embodiments, an electronic device displays multiple episodes of a collection of episodic content (e.g., a television series) in a user interface for the collection of episodic content. In some embodiments, an electronic device displays representations of, and provides access to, live-event media items accessible on the electronic device.

Abstract: Embodiments disclosed provide access to Traversal Using Relays around Network Address Translation (TURN) servers using trusted single-use credentials, and related methods, systems, and computer-readable media. In one embodiment, a method comprises receiving, by a TURN authentication agent, a request for a TURN server credential. Responsive to determining that the request is authorized, the agent generates a trusted single-use credential and transmits it to the requestor. Using this trusted single-use credential allows untrusted clients to access a TURN server without exposing a userid/password combination. In another embodiment, a method comprises receiving, by the TURN server, a request for a TURN service. The server challenges the request, and receives a userid and a password. Responsive to determining that the userid and the password constitute a trusted single-use credential and responsive to determining that the request is authorized, the server provides the TURN service for the requestor.

Abstract: A system, method, and computer program product for web communication based content servicing and delivery. In use, a first communication session is established with a user using a first embedded communication data channel. Next, during the first communication session, a second communication session is established using a second embedded communication data channel. Further, a plurality of profiles is exchanged using the second embedded communication data channel, wherein the plurality of profiles is associated with the user and with a content provider. Additionally, while simultaneously maintaining the first communication session and the second communication session, content is exchanged based on the plurality of profiles using the second embedded communication data channel.

Abstract: A system, method, and computer program product for web communication based content servicing and delivery. In use, a first communication session is established with a user using a first embedded communication data channel. Next, during the first communication session, a second communication session is established using a second embedded communication data channel. Further, a plurality of profiles is exchanged using the second embedded communication data channel, wherein the plurality of profiles is associated with the user and with a content provider. Additionally, while simultaneously maintaining the first communication session and the second communication session, content is exchanged based on the plurality of profiles using the second embedded communication data channel.

Abstract: A system, method, and computer program product for web communication based content servicing and delivery. In use, a first communication session is established with a user using a first embedded communication data channel. Next, during the first communication session, a second communication session is established using a second embedded communication data channel. Further, a plurality of profiles is exchanged using the second embedded communication data channel, wherein the plurality of profiles is associated, at least in part, with the user and with a content provider. Additionally, while simultaneously maintaining the first communication session and the second communication session, content is exchanged based on the plurality of profiles using the second embedded communication data channel.

Abstract: Providing origin insight via Session Traversal Utilities for Network Address Translation (STUN) messages for web applications, and related methods, systems, and computer-readable media are disclosed herein. In one embodiment, a method for providing origin insight for web applications via STUN messages comprises determining an origin identifier for a web application attempting to send a STUN message to a STUN server; generating the STUN message incorporating the origin identifier for the web application; and transmitting the STUN message to the STUN server. In another embodiment, a method for providing STUN services to web applications comprises receiving a STUN message from a web client, and extracting an origin identifier for a web application. Provision of a STUN service to the web application is determined based on the origin identifier. If the STUN service should not be provided, the STUN message is rejected or disregarded; otherwise the STUN message is processed.

Abstract: Embodiments disclosed provide access to Traversal Using Relays around Network Address Translation (TURN) servers using trusted single-use credentials, and related methods, systems, and computer-readable media. In one embodiment, a method comprises receiving, by a TURN authentication agent, a request for a TURN server credential. Responsive to determining that the request is authorized, the agent generates a trusted single-use credential and transmits it to the requestor. Using this trusted single-use credential allows untrusted clients to access a TURN server without exposing a userid/password combination. In another embodiment, a method comprises receiving, by the TURN server, a request for a TURN service. The server challenges the request, and receives a userid and a password. Responsive to determining that the userid and the password constitute a trusted single-use credential and responsive to determining that the request is authorized, the server provides the TURN service for the requestor.

Abstract: Embodiments disclosed provide access to Traversal Using Relays around Network Address Translation (TURN) servers using trusted single-use credentials, and related methods, systems, and computer-readable media. In one embodiment, a method comprises receiving, by a TURN authentication agent, a request for a TURN server credential. Responsive to determining that the request is authorized, the agent generates a trusted single-use credential and transmits it to the requestor. Using this trusted single-use credential allows untrusted clients to access a TURN server without exposing a userid/password combination. In another embodiment, a method comprises receiving, by the TURN server, a request for a TURN service. The server challenges the request, and receives a userid and a password. Responsive to determining that the userid and the password constitute a trusted single-use credential and responsive to determining that the request is authorized, the server provides the TURN service for the requestor.

Abstract: A system, method, and computer program product for web communication based content servicing and delivery. In use, a first communication session is established with a user using a first embedded communication data channel. Next, during the first communication session, a second communication session is established using a second embedded communication data channel. Further, a plurality of profiles is exchanged using the second embedded communication data channel, wherein the plurality of profiles is associated, at least in part, with the user and with a content provider. Additionally, while simultaneously maintaining the first communication session and the second communication session, content is exchanged based on the plurality of profiles using the second embedded communication data channel.

Abstract: In certain embodiments, a network-based data acquisition system has an acquisition device and an access device. The acquisition device has (a) a reader-specific module that (i) receives reader-specific data generated by a data reader (e.g., an RFID or other type of reader) and (ii) converts the data from the reader-specific format into reader-agnostic data in a reader-agnostic format and (b) at least one reader-agnostic module that (i) receives the reader-agnostic data from the reader-specific module and (ii) transmits the reader-agnostic data to the access device. In one implementation, the access device runs a web browser that accesses a web server on a controller of the acquisition device, and the reader-agnostic data is transmitted from the controller to the access device via a point-to-point communication path, such as a WebRTC data channel. The reader-specific module can be replaced/modified to support a new data reader without having to replace/modify any reader-agnostic module.

Abstract: In certain embodiments, a network-based data acquisition system has an acquisition device and an access device. The acquisition device has (a) a reader-specific module that (i) receives reader-specific data generated by a data reader (e.g., an RFID or other type of reader) and (ii) converts the data from the reader-specific format into reader-agnostic data in a reader-agnostic format and (b) at least one reader-agnostic module that (i) receives the reader-agnostic data from the reader-specific module and (ii) transmits the reader-agnostic data to the access device. In one implementation, the access device runs a web browser that accesses a web server on a controller of the acquisition device, and the reader-agnostic data is transmitted from the controller to the access device via a point-to-point communication path, such as a WebRTC data channel. The reader-specific module can be replaced/modified to support a new data reader without having to replace/modify any reader-agnostic module.

Abstract: Back-to-back Web Real-Time Communication (WebRTC) virtual agents, and related methods, systems, and computer-readable media are disclosed herein. In one embodiment, a method for providing back-to-back virtual WebRTC agents comprises receiving, by a WebRTC server executing on a computing device, a WebRTC offer/answer exchange between first and second WebRTC clients. The method further comprises instantiating one or more virtual WebRTC agents. The method also comprises establishing a first WebRTC interactive flow between the first WebRTC client and one of the one or more virtual WebRTC agents, and a second WebRTC interactive flow between the second WebRTC client and one of the one or more virtual WebRTC agents. The method additionally comprises directing a content of the first WebRTC interactive flow to the second WebRTC interactive flow, and a content of the second WebRTC interactive flow to the first WebRTC interactive flow, via the one or more virtual WebRTC agents.

Abstract: Distributed application of enterprise policies to WebRTC interactive sessions, and related methods, systems, and computer-readable media are disclosed. In this regard, in one embodiment, a method for applying an enterprise policy to a WebRTC interactive session comprises receiving, by a distributed policy enforcement agent of a recipient device, a WebRTC session description object directed to the recipient device originating from a sender device via a secure network connection. The method further comprises determining, by the distributed policy enforcement agent, one or more enterprise policies based on the WebRTC session description object. The method additionally comprises applying the one or more enterprise policies to the WebRTC session description object. In this manner, an enterprise may permit establishment of a WebRTC interactive session that crosses an enterprise network boundary, while at the same time ensuring that the WebRTC interactive session complies with the one or more enterprise policies.

Abstract: Enhancing privacy by obscuring Traversal Using Relays around Network Address Translator (TURN) connections, and related methods, systems, and computer-readable media are disclosed herein. In one embodiment, a method comprises obtaining, by a TURN client, one or more candidate addresses comprising a TURN relayed transport address of a TURN server. The method further comprises generating a camouflaged candidate list, based on the candidate addresses, in which the TURN relayed transport address is obscured; generating a connection setup message comprising the camouflaged candidate list; and sending the connection setup message to a TURN peer executing on a computing device. In another embodiment, a method comprises receiving, by a TURN server, a request for a provision of a first TURN service from a TURN client to connect to a TURN peer. The method further comprises masking a presence of the TURN server to the TURN peer, and relaying communications based on the masking.

Abstract: A joining peer is bootstrapped into in a peer-to-peer (P2P) network in the presence of network address translators (NAT). A bootstrap peer is contact by the joining peer to establish a connection between the joining peer and an admitting peer in the peer-to-peer network. The joining peer receives an indication from the bootstrap peer that the connection between the joining peer and the admitting peer has been established with a message path through the bootstrap peer. The indication includes contact information for the admitting peer. The connection is them modified to remove all proxies therefrom.

Abstract: Verification of privacy of Web Real-Time Communications (WebRTC) media channels via corresponding WebRTC data channels, and related methods, systems, and computer-readable media are disclosed. In this regard, in one embodiment, a method for verifying privacy of a WebRTC media channel comprises establishing the WebRTC media channel between first and second WebRTC clients using a keying material. The method further comprises establishing a corresponding WebRTC data channel between the first and second WebRTC clients using the keying material, and negotiating, in the WebRTC data channel, a cryptographic key exchange. The method also comprises generating a first and a second Short Authentication String (SAS) based on the cryptographic key exchange in the WebRTC data channel. The method further comprises displaying the first SAS and the second SAS, such that a mismatch between the first SAS and the second SAS indicates an existence of a man-in-the-middle (MitM) attacker.

Abstract: Enhancing privacy by obscuring Traversal Using Relays around Network Address Translator (TURN) connections, and related methods, systems, and computer-readable media are disclosed herein. In one embodiment, a method comprises obtaining, by a TURN client, one or more candidate addresses comprising a TURN relayed transport address of a TURN server. The method further comprises generating a camouflaged candidate list, based on the candidate addresses, in which the TURN relayed transport address is obscured; generating a connection setup message comprising the camouflaged candidate list; and sending the connection setup message to a TURN peer executing on a computing device. In another embodiment, a method comprises receiving, by a TURN server, a request for a provision of a first TURN service from a TURN client to connect to a TURN peer. The method further comprises masking a presence of the TURN server to the TURN peer, and relaying communications based on the masking.

Abstract: Embodiments disclosed provide access to Traversal Using Relays around Network Address Translation (TURN) servers using trusted single-use credentials, and related methods, systems, and computer-readable media. In one embodiment, a method comprises receiving, by a TURN authentication agent, a request for a TURN server credential. Responsive to determining that the request is authorized, the agent generates a trusted single-use credential and transmits it to the requestor. Using this trusted single-use credential allows untrusted clients to access a TURN server without exposing a userid/password combination. In another embodiment, a method comprises receiving, by the TURN server, a request for a TURN service. The server challenges the request, and receives a userid and a password. Responsive to determining that the userid and the password constitute a trusted single-use credential and responsive to determining that the request is authorized, the server provides the TURN service for the requestor.

Abstract: Scalable Web Real-Time Communication (WebRTC) media engines, and related methods, systems, and computer-readable media, are disclosed herein. In one embodiment, a method for providing a scalable WebRTC media engine comprises instantiating one or more virtual WebRTC agents, each corresponding to one or more of a plurality of WebRTC clients. The method further comprises establishing a plurality of WebRTC interactive flows, each connecting one of the one or more virtual WebRTC agents with the corresponding one or more of the plurality of WebRTC clients. The method also comprises receiving contents of the plurality of WebRTC interactive flows as input from the one or more virtual WebRTC agents, and synthesizing the contents of the plurality of WebRTC interactive flows. The method additionally comprises directing the synthesized contents as output to one of more of the plurality of WebRTC interactive flows via the corresponding one or more virtual WebRTC agents.

Abstract: Scalable Web Real-Time Communication (WebRTC) media engines, and related methods, systems, and computer-readable media, are disclosed herein. In one embodiment, a method for providing a scalable WebRTC media engine comprises instantiating one or more virtual WebRTC agents, each corresponding to one or more of a plurality of WebRTC clients. The method further comprises establishing a plurality of WebRTC interactive flows, each connecting one of the one or more virtual WebRTC agents with the corresponding one or more of the plurality of WebRTC clients. The method also comprises receiving contents of the plurality of WebRTC interactive flows as input from the one or more virtual WebRTC agents, and synthesizing the contents of the plurality of WebRTC interactive flows. The method additionally comprises directing the synthesized contents as output to one of more of the plurality of WebRTC interactive flows via the corresponding one or more virtual WebRTC agents.