🤖 AI Summary
This study addresses the high latency incurred by resource-constrained devices on over-the-top (OTT) platforms due to their reliance on cloud-based authorization, which degrades user experience. To mitigate this, the authors propose an edge-cloud collaborative authorization architecture that introduces a secure local caching layer within device middleware, integrating an adaptive eviction and proactive refresh mechanism (AEC-PR) to decouple user interactions from backend network dependencies. For the first time on such constrained devices, the design combines Ed25519 deterministic signatures, Trusted Execution Environment (TEE) isolation, and ARM Cortex-A hardware support to enable low-latency, side-channel-resistant local cryptographic verification. Experimental results demonstrate a reduction in authorization latency from 422.8 ms to 18.4 ms—a 95.6% improvement—significantly enhancing both performance and security.
📝 Abstract
As digital media consumption shifts toward large-scale Over-the-Top (OTT) platforms, the efficiency of the control plane, specifically entitlement and identity verification, has become a critical factor in user experience. Current architectures often rely on synchronous cloud-tethered validation flows that introduce significant latency, especially on resource-constrained consumer electronics. This paper proposes a Hybrid Edge-Cloud Entitlement Framework designed to minimize user-perceived friction. By implementing a secure, local caching layer within device middleware and utilizing an Adaptive Entitlement Cache with Proactive Refresh (AEC-PR) algorithm, we decouple the user interaction from backend network variability. We evaluate the performance on ARM Cortex-A series hardware, demonstrating that localized cryptographic verification reduces authorization latency from a mean of 422.8ms to 18.4ms (a 95.6% reduction) while mitigating implementation-level side-channel risks through deterministic Ed25519 arithmetic and TEE isolation.