A system and method for controlling access to downloadable resources on a network. Content download requests are received from a network service, where the content download request includes access information. An access ticket is created based on the access information, which includes various ticket fields to store access parameters parsed from the access information. The access ticket associated with a transaction request is retrieved using a ticket identifier accompanying the transaction request. A download of desired content is authorized based on the access parameters of the retrieved access ticket. When authorized, the content is delivered to a user terminal identified by the access ticket.